Use https for tarball URLs in .spec files