fix(bashkit-eval): install rustls provider for library providers

[chaliy]

Motivation

• reqwest is built with rustls-no-provider, so library consumers of bashkit-eval could construct providers and then fail/panic on the first HTTPS request when no process-wide rustls CryptoProvider is installed.
• The binary main() already installed the ring provider, but public library constructors bypassed that initialization.

Description

• Add ensure_rustls_crypto_provider() in crates/bashkit-eval/src/provider/mod.rs which installs the rustls::crypto::ring provider exactly once via OnceLock.
• Call ensure_rustls_crypto_provider()? from each public provider constructor (OpenAiProvider::new, AnthropicProvider::new, OpenAiResponsesProvider::new) before creating reqwest::Client so library users get the same initialization as the binary.
• Changes are minimal and keep existing binary initialization intact while covering the library path.

Testing

• Ran cargo fmt successfully.
• Ran cargo test -p bashkit-eval and all unit tests passed (9 passed; 0 failed).

---

Codex Task

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	bashkit	8e687f8	Commit Preview URL	May 08 2026, 09:13 AM