feat(rust): add mergify-core::http with retry + typed errors (Phase 1.2b)

[jd]

Adds the HTTP client every ported command uses. Wraps reqwest
with the invariants the design requires:

• Bearer-token auth injected when the token is non-empty; skipped
  otherwise so GitHub's anonymous public-repo reads still work.
• Tenacity-style retry on 5xx and transient network errors: 3
  attempts, exponential backoff starting at 1s. 4xx responses are
  never retried — those are caller errors and retrying would mask
  bugs.
• Typed error mapping: HTTP failures become either
  CliError::GitHubApi or CliError::MergifyApi based on the
  ApiFlavor passed at construction, so exit_code() routes
  to GITHUB_API_ERROR (5) or MERGIFY_API_ERROR (6)
  automatically.
• Per-request timeout of 30s.
• RetryPolicy is public so tests can skip the wall-clock
  backoff with initial_backoff = 0.

Also extends CliError with the two new API variants and
updates the exit_code() mapping + unit tests.

Command crates MUST NOT import reqwest directly — the only
HTTP surface is HttpClient::get and HttpClient::post.

6 new tests cover: happy-path GET, empty-token behavior, POST
with JSON body, retry on 5xx then success, exhausted retries
mapping to MergifyApi, 4xx not retried and mapping to
GitHubApi. All use wiremock for hermetic local HTTP.

Next sub-phase (1.2c / 1.2d) adds colored/spinner affordances and
the GitOps trait only when the first ported command needs
them; this PR is the minimum config validate requires.

Co-Authored-By: Claude Opus 4.7 (1M context) noreply@anthropic.com

Depends-On: #1280

[jd]

This pull request is part of a Mergify stack:

#	Pull Request	Link
1	feat(rust): add mergify-py-shim with embedded Python fallback	#1272
2	feat(rust): add mergify-core foundation types (Phase 1.2a)	#1280
3	feat(rust): add mergify-core::http with retry + typed errors (Phase 1.2b)	#1281	👈
4	feat(rust): port config validate to native Rust (Phase 1.3)	#1282
5	test: add port-inventory guard to catch un-ported Python commands	#1296
6	ci: add Rust release workflow targeting GitHub Release assets	#1297
7	feat(rust): port config simulate to native Rust (Phase 1.3b)	#1298
8	feat(rust): port ci scopes-send to native Rust (Phase 1.4)	#1300
9	feat(rust): port queue pause and unpause to native Rust (Phase 1.5)	#1301
10	feat(rust): port ci git-refs and ci queue-info to native Rust (Phase 1.6)	#1302

[mergify]

Merge Protections

Your pull request matches the following merge protections and will not be merged until they are valid.

🔴 ⛓️ Depends-On Requirements

Waiting for:

• depends-on = Mergifyio/mergify-cli#1280 [⛓️ feat(rust): add mergify-core foundation types (Phase 1.2a) #1280 (queued)]

This rule is failing.

Requirement based on the presence of Depends-On in the body of the pull request

• depends-on = Mergifyio/mergify-cli#1280 [⛓️ feat(rust): add mergify-core foundation types (Phase 1.2a) #1280 (queued)]

🔴 👀 Review Requirements

Waiting for:

• #approved-reviews-by>=2

This rule is failing.

• any of:
  • #approved-reviews-by>=2
  • author = dependabot[bot]
  • author = mergify-ci-bot
  • author = renovate[bot]

🔴 🔎 Reviews

Waiting for:

• #review-requested = 0

This rule is failing.

• #review-requested = 0
• #changes-requested-reviews-by = 0
• #review-threads-unresolved = 0

🟢 🤖 Continuous Integration

Wonderful, this rule succeeded.

• all of:
  • check-success=ci-gate

🟢 Enforce conventional commit

Wonderful, this rule succeeded.

Make sure that we follow https://www.conventionalcommits.org/en/v1.0.0/

• title ~= ^(fix|feat|docs|style|refactor|perf|test|build|ci|chore|revert|ui)(?:\(.+\))?:

🟢 📕 PR description

Wonderful, this rule succeeded.

• body ~= (?ms:.{48,})

[jd]

Revision history

#	Type	Changes	Date
1	initial	61966dc	2026-04-21 13:13 UTC
2	rebase	61966dc → 0e72eb6	2026-04-21 13:13 UTC
3	content	0e72eb6 → 1343a0a
4	rebase	1343a0a → 76c0440
5	rebase	76c0440 → 1b2f0d8
6	rebase	1b2f0d8 → 68bf609
7	rebase	68bf609 → 1a6b64e	2026-04-23 19:02 UTC