feat(hsts): trun includeSubdomain to false

BREAKING CHANGE: change default setting from `true` to `false`

Signed-off-by: BoHong Li <raccoon@hackmd.io>

Author: a60814billy

lib/config/default.js

@@ -14,7 +14,7 @@ module.exports = {
   hsts: {
     enable: true,
     maxAgeSeconds: 60 * 60 * 24 * 365,
-    includeSubdomains: true,
+    includeSubdomains: false,
     preload: true
   },
   csp: {