fix(ci): enforce HTTPS on curl redirects and block pip sdist execution

fix(ci): enforce HTTPS on curl redirects and block pip sdist execution #266