build: prefer HTTPS if available (for packages)