feat(router): customize health-check route and add SSL redirect

I pulled #2781 and #2782 into the same PR so they'd be easier to test. This also enabled me to refactor the default route for both the healthcheck endpoint and SSL redirect into the same config block, cleaning up the config and ensuring they apply to everything (i.e. before the controller, builder, store-gateway, or app routes are processed). 

TESTING: add an SSL cert, enable SSL redirects, change the custom health-check endpoint, and ensure nothing is broken
I think this can't be in this `server {}` block as it only matches when no name is matched.

> If the directive has the default_server parameter, then the enclosing server {...} block will be the default server for the address:port pair. This is useful for name-based virtual hosting where you wish to specify the default server block for hostnames that do not match any server_name directives. If there are no directives with the default_server parameter, then the default server will be the first server block in which the address:port pair appears.

http://wiki.nginx.org/HttpCoreModule#listen