Use https instead of http to fetch dependencies when possible

There are a few dependencies that we fetch over http during the Tor Browser build process. Even if we check their signature or checksum, it would be better to use https when possible.