Enforce HTTPS on Production Server

[carl-egge]

User story

1. As a user accessing the production server,
2. I want the server to use HTTPS and redirect all HTTP traffic to HTTPS,
3. So that communication is secure by default.

Acceptance criteria

• Criterion 1: The production server is configured with a valid, free SSL/TLS certificate (e.g., via Let's Encrypt).
• Criterion 2: All HTTP requests are automatically redirected to the HTTPS version of the same URL.
• Criterion 3: HTTPS is enforced for all exposed endpoints, including static frontend and backend APIs.
• Criterion 4: Certificate renewal is automated or clearly documented.

Definition of done (DoD)

• Documentation is updated to include the new feature
• Another SD, not the implementer, has reviewed the feature using the documentation.
• GitHub actions workflows for linting pass
• Feature branch has been merged and deleted

DoD general criteria

• Feature has been fully implemented
• Feature has been merged into the mainline
• All acceptance criteria were met
• Product owner approved features
• All tests are passing
• Developers agreed to release