Switched to HTTP as FTP can be problematic. uscan for example has issues
figuring out the latest version.
Added PKG_CPE_ID for proper CVE tracking.
Reorganized Makefile for consistency with other projects.
Signed-off-by: Rosen Penev <rosenp@gmail.com>