Address review feedback: restore vendor-openssl for cross-compilation

- Remove TLS comment from asyncgit/Cargo.toml (context is in README)
- Restore commented git2 lines that were unrelated to OpenSSL changes
- Restore vendor-openssl feature for cross-compilation targets
- Update Makefile to use vendor-openssl for musl, ARM, and Apple x86 builds

The vendor-openssl feature is no longer in defaults, allowing native TLS
on standard builds while still supporting vendored OpenSSL for
cross-compilation where system libraries aren't available.

Author: AndyBodnar

Cargo.toml

@@ -31,6 +31,7 @@ regex-fancy = ["syntect/regex-fancy", "two-face/syntect-fancy"]
 regex-onig = ["syntect/regex-onig", "two-face/syntect-onig"]
 timing = ["scopetime/enabled"]
 trace-libgit = ["asyncgit/trace-libgit"]
+vendor-openssl = ["asyncgit/vendor-openssl"]
 
 [dependencies]
 anyhow = "1.0"

Makefile

@@ -47,19 +47,19 @@ release-linux-musl: build-linux-musl-release
 	tar -C ./target/x86_64-unknown-linux-musl/release/ -czvf ./release/gitui-linux-x86_64.tar.gz ./gitui
 
 build-apple-x86-debug:
-	cargo build --target=x86_64-apple-darwin
+	cargo build --features vendor-openssl --target=x86_64-apple-darwin
 
 build-apple-x86-release:
-	cargo build --release --target=x86_64-apple-darwin --locked
+	cargo build --features vendor-openssl --release --target=x86_64-apple-darwin --locked
 
 build-linux-musl-debug:
-	cargo build --target=x86_64-unknown-linux-musl
+	cargo build --features vendor-openssl --target=x86_64-unknown-linux-musl
 
 build-linux-musl-release:
-	cargo build --release --target=x86_64-unknown-linux-musl --locked
+	cargo build --features vendor-openssl --release --target=x86_64-unknown-linux-musl --locked
 
 test-linux-musl:
-	cargo nextest run --workspace --target=x86_64-unknown-linux-musl
+	cargo nextest run --features vendor-openssl --workspace --target=x86_64-unknown-linux-musl
 
 release-linux-arm: build-linux-arm-release
 	mkdir -p release
@@ -73,14 +73,14 @@ release-linux-arm: build-linux-arm-release
 	tar -C ./target/arm-unknown-linux-gnueabihf/release/ -czvf ./release/gitui-linux-arm.tar.gz ./gitui
 
 build-linux-arm-debug:
-	cargo build --target=aarch64-unknown-linux-gnu
-	cargo build --target=armv7-unknown-linux-gnueabihf
-	cargo build --target=arm-unknown-linux-gnueabihf
+	cargo build --features vendor-openssl --target=aarch64-unknown-linux-gnu
+	cargo build --features vendor-openssl --target=armv7-unknown-linux-gnueabihf
+	cargo build --features vendor-openssl --target=arm-unknown-linux-gnueabihf
 
 build-linux-arm-release:
-	cargo build --release --target=aarch64-unknown-linux-gnu --locked
-	cargo build --release --target=armv7-unknown-linux-gnueabihf --locked
-	cargo build --release --target=arm-unknown-linux-gnueabihf --locked
+	cargo build --features vendor-openssl --release --target=aarch64-unknown-linux-gnu --locked
+	cargo build --features vendor-openssl --release --target=armv7-unknown-linux-gnueabihf --locked
+	cargo build --features vendor-openssl --release --target=arm-unknown-linux-gnueabihf --locked
 
 test:
 	cargo nextest run --workspace

asyncgit/Cargo.toml

@@ -14,17 +14,14 @@ keywords = ["git"]
 [features]
 default = ["trace-libgit"]
 trace-libgit = []
+vendor-openssl = ["openssl-sys"]
 
 [dependencies]
 bitflags = "2"
 crossbeam-channel = "0.5"
 dirs = "6.0"
 easy-cast = "0.5"
 fuzzy-matcher = "0.3"
-# TLS is provided by platform-native libraries:
-# - Windows: WinHTTP/Schannel (built-in)
-# - macOS: SecureTransport (built-in)
-# - Linux: System OpenSSL (install via package manager)
 git2 = "0.20"
 git2-hooks = { path = "../git2-hooks", version = ">=0.6" }
 gix = { version = "0.77.0", default-features = false, features = [
@@ -34,6 +31,10 @@ gix = { version = "0.77.0", default-features = false, features = [
     "status",
 ] }
 log = "0.4"
+# git2 = { path = "../../extern/git2-rs", features = ["vendored-openssl"]}
+# git2 = { git="https://github.com/extrawurst/git2-rs.git", rev="fc13dcc", features = ["vendored-openssl"]}
+# pinning to vendored openssl, using the git2 feature this gets lost with new resolver
+openssl-sys = { version = '0.9', features = ["vendored"], optional = true }
 rayon = "1.11"
 rayon-core = "1.13"
 scopetime = { path = "../scopetime", version = "0.1" }