replace usage of surf with lighter-weight http-client

[Voxelot]

surf is bloated with an unmaintained dependency graph containing many security warnings. We should replace it with a lighter-weight solution such as reqwest or hyper.

It should also use rustls or some other non-openssl dependency.

[Voxelot]

We can't migrate to reqwest since openssl dependencies are being enabled by the graphql client extension framework cynic. Once they release this pr (obmarg/cynic#411), we'll be able to use reqwest without depending on openssl.

[adlerjohn]

@Voxelot Cynic seems to be taking its sweet time releasing v2. Would it be worth it to fork it and release a forked cynic we can use ourselves?

[Voxelot]

Cynic is composed of many libraries, so an alternative is to only use its querygen crate, and wrap it with our own HTTP client.

[adlerjohn]

Note: http-rs/http-client#98

[xgreenx]

@Voxelot I guess we can close this issue because of #786 ?

[Voxelot]

yep!