doc: use HTTPS URLS when possible