fix: log source url on http download failure (#400) context: when hitting a download error the log only has the url in hermit manifest but not the one from the source. we are trying to figure out why hermit is getting 429 which does seem to come from github straight instead of the internal source url.