v0.39.1

fix: log source url on http download failure (#400)

context: when hitting a download error the log only has the url in
hermit manifest but not the one from the source.

we are trying to figure out why hermit is getting 429 which does seem to
come from github straight instead of the internal source url.