Use https where available, and update some Debian Policy links to the
new layout.