feat: replace primp with webclaw-tls, bump to v0.3.0

Replace primp dependency with our own TLS fingerprinting stack
(webclaw-tls). Perfect Chrome 146 JA4 + Akamai hash match.

- Remove primp entirely (zero references remaining)
- webclaw-fetch now uses webclaw-http from github.com/0xMassi/webclaw-tls
- Native + Mozilla root CAs (fixes HTTPS on cross-signed cert chains)
- Skip unknown certificate extensions (SCT tolerance)
- 99% bypass rate on 102 sites (was ~85% with primp)
- Fixes #5 (HTTPS broken — example.com and similar sites now work)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

crates/webclaw-fetch/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "webclaw-fetch"
-description = "HTTP client with browser TLS fingerprint impersonation via Impit"
+description = "HTTP client with browser TLS fingerprint impersonation via webclaw-http"
 version.workspace = true
 edition.workspace = true
 license.workspace = true
@@ -12,9 +12,7 @@ serde = { workspace = true }
 thiserror = { workspace = true }
 tracing = { workspace = true }
 tokio = { workspace = true }
-primp = { git = "https://github.com/deedy5/primp", default-features = false, features = [
-    "default-tls", "http2", "impersonate", "cookies", "gzip", "brotli", "deflate", "zstd", "socks",
-] }
+webclaw-http = { git = "https://github.com/0xMassi/webclaw-tls" }
 url = "2"
 rand = "0.8"
 quick-xml = { version = "0.37", features = ["serde"] }