Since pantheon.yml settings currently don't work in Next.js sites, we will need to document how to do redirects to https another way. Over in stevector/office-artifacts#15 I'm trying a technique in middleware.ts that detects incoming request headers added by the CDN.