puppetize properly https://wg.softwareheritage.org configuration

---

Migrated from T353 (view on Phabricator)