According to this Google Cloud Platform Blog post, support for the HTTP/2 protocol is automatically negotiated as part of the TLS handshake via ALPN. This is done by default and the runtime used should not effect this.
If you are using the default appspot.com address then it should already be served using HTTPS. If your request is not being served with HTTPS it's probably because a custom domain is being used. Please check that you have mapped the custom domain using these steps, updated the DNS records and then secure it with SSL, either with the automatically provided one or by using your own. You can check to see if your website is secure using the tips detailed here.