HTTP client adapter for HuggingFace downloads used by tokenizers.
The upstream Tokenizers.HTTPClient relies on CAStore.file_path/0, which
points at a priv/ file that is not available inside an escript archive.
This adapter uses OTP-provided CA certs (:public_key.cacerts_get/0) so the
./tinkex CLI can download tokenizers at runtime.