Use https permanently for gfz deployment (Follow-up from "Add the GFZ deployment on staging and prod")

The following discussion from !2 (merged) should be addressed:

• @wilhelm.becker started a discussion: (+3 comments)

    # add_header Strict-Transport-Security "max-age=63072000" always;