49eac4f945
Adds https-redirect@file to the router.middlewares annotation so static sites force HTTP → HTTPS automatically. The middleware is defined in fritzlab/apps/sjc001/infra/traefik/manifests/dynamic-config.yaml and uses redirectScheme (permanent 308). Safe with cert-manager HTTP-01: the solver pod's Ingress is generated separately and doesn't pick up this annotation, so /.well-known/acme-challenge/* on port 80 continues to reach the solver directly.