[spec] fix upstream URLs to point to https and official release repo

Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1708616

also to be noted, the Source0: line is different from upstream and Fedora
because upstream can handle tarballs during development

Signed-off-by: Fabio M. Di Nitto <fdinitto@redhat.com>