point submodules to public HTTPS URLs

[zeuner]

If you point .gitmodules to SSH URLs, recursive cloning requires a GitHub account and a SSH key being configured. You can make your repository more accessible to users by using HTTPS URLs instead (implemented by this PR).