Mk/Scripts: protect URL string by enclosing it quotes

The format of the manifest file does not allow commas in values.
Since URLs may include commas, they need to be protected against
interpretation of these commas as field separators.

This update unbreaks the package generation for ports that have
a comma in the URL.

Approved by: portmgr (implcit)