Use HTTPS for sites which support it

This replaces HTTP links to sites which support HTTPS with the secure version.
In a bizarre move, this URI redirects all HTTPS traffic back to HTTP for some reason. It does this even though `the.earth.li` has a valid certificate. It would be more efficient to avoid this redirect if the package is going to be downloaded over HTTP anyway. As with Nginx, the packages are GPG-verified though.