fix: call ring provider install exactly once via Once

Use std::sync::Once in ensure_ring_provider so that
install_default() is only attempted on the first call per process,
avoiding redundant global-state mutations on subsequent calls.

Author: ananas-block

sdk-libs/photon-api/src/lib.rs

@@ -12,7 +12,11 @@
 include!("codegen.rs");
 
 fn ensure_ring_provider() {
-    let _ = rustls::crypto::ring::default_provider().install_default();
+    use std::sync::Once;
+    static ONCE: Once = Once::new();
+    ONCE.call_once(|| {
+        let _ = rustls::crypto::ring::default_provider().install_default();
+    });
 }
 
 pub mod apis {