Add trixie support, fourth try

circleci: clone via https

The standard "checkout" requires SSH, and I prefer not to
have to add another key.