Point SecurityHeaders.com link at HTTPS

Without a scheme, the scanner defaults to http://agoracosmica.org and
graded R because the unencrypted endpoint is missing TLS-tier headers
(HSTS, etc). Pass the encoded https:// URL plus followRedirects=on so
the scan hits the production HTTPS bundle and shows the A+ the badge
already advertises.

Author: michael-chipmates

README.md

@@ -14,7 +14,7 @@
   <a href="#"><img src="https://img.shields.io/badge/TypeScript-strict-3178C6?style=flat-square&logo=typescript&logoColor=white" alt="TypeScript: strict" /></a>
   <a href="docs/ACCESSIBILITY.md"><img src="https://img.shields.io/badge/WCAG-2.2%20AA-green?style=flat-square" alt="WCAG 2.2 AA" /></a>
   <a href="docs/COMPLIANCE.md"><img src="https://img.shields.io/badge/EU-Compliant-blue?style=flat-square" alt="EU Compliant" /></a>
-  <a href="https://securityheaders.com/?q=agoracosmica.org"><img src="https://img.shields.io/badge/Security%20Headers-A%2B-brightgreen?style=flat-square" alt="Security Headers: A+" /></a>
+  <a href="https://securityheaders.com/?q=https%3A%2F%2Fagoracosmica.org&followRedirects=on"><img src="https://img.shields.io/badge/Security%20Headers-A%2B-brightgreen?style=flat-square" alt="Security Headers: A+" /></a>
 </p>
 
 <p align="center">

SECURITY.md

@@ -158,7 +158,7 @@ For the full architecture: [docs/SECURITY-ARCHITECTURE.md](docs/SECURITY-ARCHITE
 
 Independent third-party scanners. Run them any time:
 
-- **[SecurityHeaders.com](https://securityheaders.com/?q=agoracosmica.org)** · HTTP security headers (CSP, HSTS, etc.). Currently **A+**.
+- **[SecurityHeaders.com](https://securityheaders.com/?q=https%3A%2F%2Fagoracosmica.org&followRedirects=on)** · HTTP security headers (CSP, HSTS, etc.). Currently **A+**.
 - **[SSL Labs](https://www.ssllabs.com/ssltest/analyze.html?d=agoracosmica.org)** · TLS configuration. Currently **A+**.
 - **[Mozilla Observatory](https://observatory.mozilla.org/analyze/agoracosmica.org)** · comprehensive web security scan.
 - **[Hardenize](https://hardenize.com/report/agoracosmica.org)** · DNS, email, TLS depth audit.