improve signed reads, crypto hardening, and scraper transport

app/services/telegram.py

@@ -27,7 +27,6 @@ import logging
 from datetime import datetime, timezone
 from typing import Optional
 
-import httpx
 from sqlalchemy import select, update
 
 from app.config import settings
@@ -274,8 +273,8 @@ async def send_message(chat_id: int | str, text: str, *,
     if reply_markup is not None:
         payload["reply_markup"] = reply_markup
     try:
-        async with httpx.AsyncClient(timeout=10) as client:
-            r = await client.post(url, json=payload)
+        from app.services.http_client import get_client
+        r = await get_client().post(url, json=payload, timeout=10)
         if r.status_code != 200:
             logger.warning("Telegram sendMessage failed chat=%s status=%d body=%s",
                            chat_id, r.status_code, r.text[:200])
@@ -302,8 +301,8 @@ async def edit_message(chat_id: int, message_id: int, text: str, *,
     if reply_markup is not None:
         payload["reply_markup"] = reply_markup
     try:
-        async with httpx.AsyncClient(timeout=10) as client:
-            r = await client.post(url, json=payload)
+        from app.services.http_client import get_client
+        r = await get_client().post(url, json=payload, timeout=10)
         if r.status_code != 200:
             # Telegram returns 400 on "message is not modified" — harmless.
             if "message is not modified" not in r.text:
@@ -331,8 +330,8 @@ async def answer_callback(callback_query_id: str, text: str = "",
         payload["text"] = text
         payload["show_alert"] = show_alert
     try:
-        async with httpx.AsyncClient(timeout=10) as client:
-            await client.post(url, json=payload)
+        from app.services.http_client import get_client
+        await get_client().post(url, json=payload, timeout=10)
         return True
     except Exception as exc:
         logger.debug("Telegram answerCallback exception: %s", exc)