fix(redirection): redirige HTTP vers HTTPS via .htaccess

- Ajoute les règles mod_rewrite pour forcer HTTPS
- Gère les reverse proxies via X-Forwarded-Proto
- Exclut le chemin Let's Encrypt .well-known/acme-challenge

src/.htaccess

@@ -1,3 +1,12 @@
+<IfModule mod_rewrite.c>
+    RewriteEngine On
+    # Redirect HTTP to HTTPS, including behind reverse proxies
+    RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/
+    RewriteCond %{HTTPS} off
+    RewriteCond %{HTTP:X-Forwarded-Proto} !https
+    RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
+</IfModule>
+
 <IfModule mod_headers.c>
     # Force HTTPS for one year
     Header always set Strict-Transport-Security "max-age=31536000"