- Any http failure (ConnectError, ConnectTimeout, ReadTimeout, TLS error
inside a redirect chain) now falls through to an https retry instead
of immediately marking dead.
- Use one unified 8s connect / 12s read timeout for both schemes so that
http→https redirects followed inside the same client get a full TLS
handshake window (previously 4s http timeout was too short for the
https redirect hop).
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>