Function https_h1_client_config 

pub fn https_h1_client_config(roots: RootCertStore) -> ClientConfig

HTTP/1.1-ALPN rustls client config over the given trust roots: the shared shape for every outbound https dial that speaks HTTP/1.1 — https-protocol upstream connectors, active health probes, and the JWKS fetcher (#121). Keeping one constructor here means a config generation applies IDENTICAL trust and handshake policy across the pooled client, the probes, and the fetcher; http2 upstreams build their own config (same roots, h2 ALPN).