goose depends on 3 versions of `reqwest`

```
reqwest 0.11 → pulled by posthog-rs (analytics). Single dep forcing an ancient reqwest.
reqwest 0.12 → pulled by hf-hub, oauth2, jsonschema.
reqwest 0.13 → direct dep + rmcp 1.1.
```