apk_update: use URL_PRINTF

apk update repo URLs are printed raw and those might contain authentication passwords for repositories. Using URL_PRINTF would censor that out (like in the fetch lines above).