--insecure required when using HTTP

[bacongobbler]

With OCI enabled, I cannot deploy anything unless I add the --insecure flag.

><> cloud login --url http://cloud.local.fermyon.link
What authentication method does this server support?

1. Sign in with GitHub
2. Sign in with a username and password

Enter a number: 1

Copy your one-time code:

g6cHTPH6

...and open the authorization page in your browser:

http://cloud.local.fermyon.link/device-authorization

Waiting for device authorization...
Device authorized!
><> cloud deploy
Uploading registry.cloud.local.fermyon.link/fermyon-developer:0.1.0-rad1a18b4 to Fermyon Cloud...
Error: cannot push Spin application

Caused by:
    0: error sending request for url (https://registry.cloud.local.fermyon.link/v2/fermyon-developer/blobs/uploads/): error trying to connect: tcp connect error: Connection refused (os error 111)
    1: error trying to connect: tcp connect error: Connection refused (os error 111)
    2: tcp connect error: Connection refused (os error 111)
    3: Connection refused (os error 111)

Learn more at https://developer.fermyon.com/cloud/faq

This is resolved if I add the --insecure flag to cloud login.

If the Cloud URL is an HTTP URL, should we assume the OCI registry is also using HTTP? IMO we should probably assume the connection is "insecure" when we're logging in via HTTP.