deploy: show HTTP errors when virustotal error fails.
Otherwise, this was posting mystery JSON parsing errors because it was trying to parse the HTTP error page as JSON. This also moves the virustotal API key to post data so it is not printed out in the stacktrace.