Force HTTPS across the SW samples.

Following @jakearchibald's lead at https://github.com/jakearchibald/trained-to-thrill/blob/master/www/static/js-unmin/index.js#L6

Putting it early up in the `<head>` since we know the rest of the page won't work if we're on HTTP.