fix: HAWNG-519 Add the Strict-Transport-Security header to all locations

[phantomjinx]

• The header mandates an HTTPS connection with no initial plain HTTP request/response so ensuring the whole connection is secure.

• While it is inherited but sub-locations, where other add_header properties are defined, it must be re-defined