fix(hvcs): allow insecure http connections if configured

[codejedi365]

Purpose

Remove the hard coded https:// throughout the code and allow a flag to toggle insecure mode

Rationale

Although insecure connections are highly not recommended, it is not the job of PSR to enforce this standard. Internal networks do not always have the luxury of public CAs to provide trusted HTTPS and sometimes HTTP must be used. This is the risk of the network owner. This implementation follows the concept of Podman to add to the configuration the insecure flag to a defined url. The default is to prevent HTTP if detected and throw a warning as it could easily be a typo but ultimately allow the user to validate that, "yes, I know it is insecure but do it anyway". We previously would not support this at all. Note that this was less of an issue until the last release when url schemes became more regulated with the url parsing.