fix(music-link): give the Tidal/proxy fast path a timeout and a shared client

Both requests built bare reqwest clients with no timeout; a stalled
connection parked the fast path forever and the Odesli fallback, which only
runs afterwards, never got its turn. One OnceLock client with the same
10 s / 5 s budget as odesli.rs.

cc

crates/qbz-music-link/Cargo.toml

@@ -25,3 +25,8 @@ log = { workspace = true }
 
 # Error handling
 thiserror = { workspace = true }
+
+[dev-dependencies]
+# The timeout test builds a reqwest client, which panics with "No provider
+# set" until a process-level rustls CryptoProvider exists (same as qbz-qobuz).
+rustls = { version = "0.23", features = ["aws_lc_rs"] }