dev/source: only mention the https repo and not the git one

since the https one will provide more certainty that you actually get
the source from the correct source