Upgrade HTTP package archive download URLs to HTTPS

[Avamander]

Describe the request

I stumbled (in a restrictive network environment) upon the fact that arduino:dfu-util package seems to reference files using non-HTTPS links.

Ideally any URLs would be tried HTTPS first (or in the case of Arduino's packages, they could just use HTTPS). TLS stacks tend to be more resilient than anything inside it, so there'd be a clear security benefit.

Describe the current behavior

Files such as http://downloads.arduino.cc/tools/dfu-util-0.11-arduino5-darwin_amd64.tar.gz are currently being referenced by some Arduino packages and arduino-cli tests.

Arduino CLI version

N/A

Operating system

macOS

Operating system version

N/A

Additional context

No response

Issue checklist

• I searched for previous requests in the issue tracker
• I verified the feature was still missing when using the nightly build
• My request contains all necessary details