LOW: Change ArXiv collector to use HTTPS

[Brad-Edwards]

Severity: Low (Appsec L3)

`src/collectors/arxiv.ts:7` — Uses `http://export.arxiv.org/api/query\` (plaintext). ArXiv supports HTTPS.

Recommendation: Change to `https://export.arxiv.org/api/query\`.