wikitech - raise max-age for STS to 1 year

after we deliberately started with just 7 days
to be careful, now raise it to a year.

this will then also fix the TOO SHORT warning
reported by Qualys SSL Server Test

Strict Transport Security (HSTS)
Yes   max-age=604800   TOO SHORT (less than 180 days)

1 year is also used in examples on OWASP and en.wp

Bug: 38516
Change-Id: I4dc377c0abb8e2e9b3f5a2e292129a42bf3880d9
Merge "wikitech - raise max-age for STS to 1 year" into production