How to Add Security Headers to Your AI-Built App: A 7-Step Beginner Guide to HTTPS and CSP