k-ap 0.5.1; reqwest ring-only, sqlx no tls; bootstrap installs ring provider

crates/tui/src/client.rs

@@ -46,6 +46,8 @@ pub struct ApiClient {
 
 impl ApiClient {
     pub fn new(url: &str) -> Self {
+        // reqwest is built without a bundled TLS provider; install ring first.
+        let _ = rustls::crypto::ring::default_provider().install_default();
         Self {
             base_url: std::sync::RwLock::new(url.to_string()),
             http: reqwest::Client::new(),