It looks like HTTPS is setup for your site, but it is not being “enforced”. On your site settings page, search for the force https site setting. Enable that setting if it is not enabled. Unless something has changed recently, when force https is not enabled, links in emails sent from Discourse will use HTTP instead of HTTPS.