API site serves all traffic via HTTPS

All traffic to api.joomla.org is forced to HTTPS, this PR updates the references to that site to use HTTPS.