Secure dev URL and insecure WS for HMR

[erikICG]

I'm trying to use Project IDX as my dev environment.

There's a problem with HMR. I believe it has to do something with this:

[cossssmin]

It's failing because Maizzle dev server does not currently support https.

This isn't a priority for the project right now, but I'd welcome a PR that implements this with self-signed certificates and everything, so it "just works". Maybe with something like listhen 👍