fix: upgrade reqwest from 0.12 to 0.13 and rename the rustls-tls feature to rustls (#1068)

closes #1014

Motivation

vp install fails on macOS with a TLS error when trying to download the
Node.js runtime from nodejs.org:

error: Failed to download Node.js runtime: Failed to download from
https://nodejs.org/dist/v22.18.0/SHASUMS256.txt: error sending request
for url

The root cause is how reqwest 0.12 handles TLS certificate verification
on non-Windows platforms. With the
rustls-tls feature, it uses webpki-roots — a hardcoded bundle of Mozilla
root certificates compiled into the
binary. If the server's certificate chain involves a CA not present in
that bundle (or the bundle is
outdated), TLS verification fails, even though the system's certificate
store (macOS Keychain) trusts the
certificate.

reqwest 0.13 replaces the rustls-tls feature with rustls, which uses
rustls-platform-verifier instead of
webpki-roots. This verifier delegates certificate validation to the
OS-native certificate store
(Security.framework on macOS, SChannel on Windows), matching the
behavior of curl and other system tools.

---------

Co-authored-by: a.zavernyaev <a.zavernyaev@tbank.ru>
Co-authored-by: MK (fengmk2) <fengmk2@gmail.com>

Author: 3 people

.github/workflows/test-standalone-install.yml

@@ -228,7 +228,7 @@ jobs:
             -e VITE_PLUS_VERSION=alpha \
             -e CI=true \
             alpine:3.21 sh -c "
-              # libstdc++ is needed by unofficial-builds Node.js musl binary
+              # libstdc++: required by unofficial-builds Node.js musl binary
               apk add --no-cache bash curl ca-certificates libstdc++
               cat /workspace/packages/cli/install.sh | bash
               export PATH=\"\$HOME/.vite-plus/bin:\$PATH\"