Not secure after deployment my laravel apps

I am using Laravel 11.42.1, and my Heroku app did the same thing. These were the changes I made to get it to work:

1. Edit "app/Providers/AppServiceProvider.php" with this code:

<?php

namespace App\Providers;

use Illuminate\Support\Facades\URL;
use Illuminate\Support\ServiceProvider;

class AppServiceProvider extends ServiceProvider
{
    /**
     * Register any application services.
     */
    public function register(): void
    {
        //
    }

    /**
     * Bootstrap any application services.
     */
    public function boot(): void
    {
        // Force HTTPS in non-local environments
        if($this->app->environment('production', 'staging')) {
            URL::forceScheme('https');
        }
    }
}

2. Run this command in the terminal to create a new middleware class:

php artisan make:middleware TrustProxies

3. Edit "app/Http/Middleware/TrustProxies.php" with this code:

<?php
 
 namespace App\Http\Middleware;
 
 use Closure;
 use Illuminate\Http\Request;
 use Symfony\Component\HttpFoundation\Response;
 use Illuminate\Http\Middleware\TrustProxies as Middleware;
 
 class TrustProxies extends Middleware
 {
     /**
      * The trusted proxies for this application
      *
      * @var array|string|null
      */
     protected $proxies = '*'; // Trust all proxies (Heroku's dynamic IPs)
 
     /**
      * The headers that should be used to detect proxies.
      *
      * @var int
      */
     protected $headers =
         Request::HEADER_X_FORWARDED_FOR |
         Request::HEADER_X_FORWARDED_HOST |
         Request::HEADER_X_FORWARDED_PORT |
         Request::HEADER_X_FORWARDED_PROTO |
         Request::HEADER_X_FORWARDED_AWS_ELB;
     /**
      * Handle an incoming request.
      *
      * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
      */
     public function handle(Request $request, Closure $next): Response
     {
         return $next($request);
     }
 }

4. On Heroku, I set APP_ENV and APP_URL environment variables on my staging and production apps. I ensured the SSL certificate was created and working.