chore: local development via http

[gryevns]

I want to be able to use embed for local development/testing but am currently restricted because of the hostToUrl logic. We currently map both the iframeUrl and apiUrl to https by default unless the hostname of the provided value equals one of localhost or 127.0.0.1. This doesn't work for my local setup as the embed iframe is available at http://embed.localhost.

> ['localhost', '127.0.0.1'].includes(new URL('http://embed.localhost').hostname)
false

This change adds a new optional prop to embed (secure) which can be used to force http rather than the default https.

Release Notes

Updates handling of iframeHost and apiHost so that both use https by default. If you wish to use http instead you should pass a new prop secure={false} to embed.

[douglaseggleton]

LGTM

[douglaseggleton]

@cbetta how do you feel about this?

[gr4vy-code]

🚀 PR was released in v2.10.0 🚀