Add a self-referencing rel=canonical on every indexable page pointing at the preferred HTTPS URL.
Use canonicals for query-param and trailing-slash variants — don’t noindex pages you still want indexed.
After fixing, crawl again and confirm “No canonical” flags disappear in the site map panel.