Use git_repository instead of http_archive

[steeve]

github.com/repo/archive/commit zip are created on the fly and can change, breaking the checksum. Either recommend use git_repository or upload real releases with fixed .zip files.

[uhthomas]

Bazel recommends against using git_repository.