Build delivery over HTTPS and flatten source/web.

Keep/restore https://%@ in type0x01/core and rewrite daily module URLs to https, and move campaign assets from source/web/<hash>/ up to source/web/ so templates match the channel artifact layout.

Co-authored-by: Cursor <cursoragent@cursor.com>

frontend/tools/tests/test_patch_core.py

@@ -22,7 +22,7 @@ class UpdateDailyHashesTest(unittest.TestCase):
             },
             "springboard_entries": [
                 {
-                    "url": "http://[HOST_PLACEHOLDER]/sync/spring.js",
+                    "url": "https://[HOST_PLACEHOLDER]/sync/spring.js",
                     "sha256": "old",
                     "size": 2,
                 }
@@ -49,7 +49,7 @@ class UpdateDailyHashesTest(unittest.TestCase):
             )
         )
 
-        prefix = f"http://[HOST_PLACEHOLDER]/channel/{channel}/sync/"
+        prefix = f"https://[HOST_PLACEHOLDER]/channel/{channel}/sync/"
         self.assertEqual(result["core"]["url"], prefix + "erupt_flee.js")
         self.assertEqual(result["core"]["sha256"], "core-hash")
         self.assertEqual(result["springboard_entries"][0]["url"], prefix + "spring.js")