test-hybridencode: extensions are replicated on hashed paths
unfortunately, this is done unbounded, so the length of the hashed path
is not really limited
hgweb: respond 403 forbidden for ssl required error
It's preferable to report "ssl required" as an error, so that the client
can detect error and exit with 255. Currently hg exits with 1, which is
"nothing to push."