Function probe_tls 

fn probe_tls(config: &Config, proxy: &ProxySnapshot) -> Result

Fails startup when an HTTPS client cannot be constructed.

The clients are built lazily on first use, so a platform trust store that yields no roots surfaces as a panic inside whichever worker reaches for a client first. Probing once at startup turns that into a legible boot error.