fix(crypto): switch to ring for non-FIPS builds, bump libdatadog

[duncanista]

Overview

Switch the default crypto backend from aws-lc-rs to ring for non-FIPS builds, reducing the release binary size by ~15% (8.7MB -> 7.4MB on macOS arm64). FIPS builds continue to use aws-lc-rs via rustls/fips.

• Bump libdatadog to 18a02650 (ring for non-FIPS)
• Switch rustls features from aws-lc-rs to ring
• Update crypto provider init to use ring::default_provider()

Other

• Adapt ObfuscationConfig to new nested struct API

Testing

Layer size check
DataDog/libdatadog#1816

[Copilot]

Pull request overview

Switches the non-FIPS TLS crypto backend to ring (while keeping FIPS builds on the rustls FIPS provider) and updates libdatadog + related config wiring accordingly.

Changes:

• Switch rustls feature/provider usage from aws-lc-rs to ring for non-FIPS builds (including provider initialization in the trace HTTP client and a unit test).
• Bump libdatadog git revisions for libdd-* crates and regenerate Cargo.lock.
• Adapt ObfuscationConfig construction to the newer nested-struct API.

Reviewed changes

Copilot reviewed 3 out of 5 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
bottlecap/src/traces/trace_processor.rs	Updates test-time rustls provider installation to ring.
bottlecap/src/traces/http_client.rs	Installs ring as the default rustls crypto provider for custom TLS/root-cert handling.
bottlecap/src/bin/bottlecap/main.rs	Updates ObfuscationConfig initialization to nested config structs + defaults.
bottlecap/Cargo.toml	Switches rustls features to ring and bumps libdd-* deps to the new libdatadog rev.
bottlecap/Cargo.lock	Lockfile updates reflecting libdatadog bump + new transitive deps.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.