Enable feature rustls-tls-native-roots for reqwest

[ShoyuVanilla]

Problem

Since #5181, some cli apps like solana-cli aren't working well on environments that CAs are needed to connect to the RPC endpoints.

That's because its dependency reqwest isn't enabling any feature for loading CAs. I believe that it's reasonable to enable rustls-tls-native-roots, which loads system CAs via rustls-native-certs, because solana-cli is not a library but cli app, so the users can't really load CAs manually.

But why it had been working well before #5181? That was purely by accident by resolving with another dependency here:

agave/Cargo.toml

Line 271 in 47c0383

goauth = "0.13.1"

goauth enables reqwest's default-tls feature by default
, and that feature automatically loads system CAs via OpenSSL.
Before #5181, there had been only single version of reqwest across the workspace, so it had been resolved with default-tls feature turned on implicitly. (And every tls things had been done via OpenSSL, not rustls)
But that PR has introduced the reqwest = "0.12", so there are two versions of reqwest now, 0.11 and 0.12. The former is still enabling default-tls feature but the later now lacks of it.

Summary of Changes

This makes cli apps like solana-cli to load system CAs

[0xbrw]

@yihau would you know the right person to review this?

[joncinque]

Thanks for your contribution! It makes sense to me, but let's localize the change to avoid pulling in more dependencies for crates unnecessarily.

[joncinque]

We shouldn't enable all of these features for every crate using reqwest in the workspace.

Instead, can you only make the change in cli/Cargo.toml?

[ShoyuVanilla]

Fair point. I've enabled it for solana-cli and solana-cargo-build-sbf. We also have agave-install but since it's not only just a bin but also a lib published on crates.io I haven't enabled the feature for it.

[joncinque]

Looks great, thanks!

And if you want, you can also add the feature to agave-install -- even though it's technically published as a lib, I think that's more to facilitate having multiple bins.

Also, it doesn't have any dependents: https://crates.io/crates/agave-install/reverse_dependencies, so it should be safe to change.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 83.0%. Comparing base (7865ba5) to head (1c1c1ab).
⚠️ Report is 9 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff            @@
##           master    #7697     +/-   ##
=========================================
- Coverage    83.1%    83.0%   -0.1%     
=========================================
  Files         812      812             
  Lines      356963   356963             
=========================================
- Hits       296642   296559     -83     
- Misses      60321    60404     +83     

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[joncinque]

Merging this PR, feel free to create a new one for agave-install -- thanks again for your contribution!