Enforce HTTPS canonical Studio routes

infrastructure/gateway/envoy/routes/forgejo.yaml

@@ -17,6 +17,7 @@ spec:
       filters:
         - type: RequestRedirect
           requestRedirect:
+            scheme: https
             path:
               type: ReplaceFullPath
               replaceFullPath: /services/studio/forgejo/

infrastructure/gateway/envoy/routes/openproject.yaml

@@ -12,8 +12,21 @@ spec:
   rules:
     - matches:
         - path:
-            type: PathPrefix
+            type: Exact
             value: /services/studio/openproject
+      filters:
+        - type: RequestRedirect
+          requestRedirect:
+            scheme: https
+            path:
+              type: ReplaceFullPath
+              replaceFullPath: /services/studio/openproject/
+            statusCode: 301
+
+    - matches:
+        - path:
+            type: PathPrefix
+            value: /services/studio/openproject/
       backendRefs:
         - name: openproject
           port: 8080

infrastructure/gateway/envoy/routes/pgadmin.yaml

@@ -17,6 +17,7 @@ spec:
       filters:
         - type: RequestRedirect
           requestRedirect:
+            scheme: https
             path:
               type: ReplaceFullPath
               replaceFullPath: /services/studio/pgadmin/