storage/rest: allow injecting custom http.Client