chore(deps): align external dependencies with SMG

[BugenZhao]

Summary

• align the direct reqwest dependency with SMG at 0.13.4
• align the blake3 minimum version with SMG at 1.8
• forward the selected TLS backend to both direct HTTP requests and optional hf-hub requests
• make Rustls the default TLS backend while retaining native TLS as an explicit opt-in

Why

MediaConnector::new accepts a reqwest::Client, so the standalone crate's reqwest 0.12 dependency was incompatible with SMG's reqwest 0.13 client. Reqwest 0.13 also renamed its Rustls feature to rustls; explicitly forwarding each TLS choice to hf-hub keeps model-config downloads functional now that hf-hub retains its own reqwest 0.12 dependency.

SMG uses Rustls for outbound HTTP, so selecting rustls-tls by default keeps the standalone crate's default behavior aligned with its primary downstream. Consumers that require native TLS can select native-tls with default features disabled.

Downstream callers constructing MediaConnector with a reqwest client should use reqwest 0.13 with this revision.

Validation

• cargo test --all-targets
• cargo test --all-targets --no-default-features
• cargo clippy --all-targets -- --deny warnings
• cargo clippy --all-targets --no-default-features -- --deny warnings
• cargo check --all-targets --no-default-features --features hf-hub,rustls-tls
• cargo check --all-targets --no-default-features --features hf-hub,native-tls
• cargo fmt --all -- --check

The all-features OpenCV combination is covered by GitHub Actions; the local machine does not have pkg-config/OpenCV installed.