Give Sources and SourceProviders a url attribute

This is needed for https://github.com/CocoaPods/CocoaPods/pull/2513.
It feels a bit like an overreach to disable it globally for one infraction that's my only concern with it