fix(bashkit-eval): make rustls provider init idempotent

[chaliy]

Motivation

• ensure_rustls_crypto_provider() previously cached any install_default() error in a OnceLock, which breaks callers when a rustls provider was already installed (benign second-install case).

Description

• Update ensure_rustls_crypto_provider() to treat install_default() failing as success when CryptoProvider::get_default() is already Some, preserving idempotence while keeping OnceLock memoization.
• Preserve original failure semantics for real install errors.
• Add a unit test ensure_rustls_provider_succeeds_when_already_installed that pre-installs the ring provider and asserts the helper returns Ok(()).

Testing

• Ran cargo test -p bashkit-eval provider::tests::ensure_rustls_provider_succeeds_when_already_installed and the test passed.
• Built and ran the bashkit-eval package tests as part of the run; targeted regression test succeeded.

---

Codex Task

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	bashkit	71d4fcd	Commit Preview URL	May 09 2026, 09:19 AM