The 2.7.1 update (#476) set 'shared-feature' src files to pure 2.7.1,
which dropped real fork-only patches that 2.7.1 does not provide. Restore
them and fix the platform build regressions Nightly #27 surfaced:

- wxMediaCtrl3.cpp: restore #ifndef BAMBUSTUDIO_NO_AVVIDEODECODER guard.
  Windows-ARM64 excludes AVVideoDecoder (no FFmpeg) but 2.7.1 uses it
  unconditionally -> LNK2001 unresolved external.
- deps/ZLIB 1.2.13 -> 1.3.1: 1.2.13's K&R decls break the macOS 26 SDK
  ('error: expected )' in zError).
- MainFrame.cpp: restore __WXGTK__ deferred-geometry patch — avoids the
  Wayland gtk_window_resize 'width > 0' assertion at startup.
- Preset.cpp: restore parent-preset fallback — load default config instead
  of silently deleting a user preset whose parent is missing.
- cd-nightly.yml: drop BambuStudio_dep_* tarballs from the release
  (cd-release already did; nightly leaked ~800 MB of internal deps).

The 2.7.1 update (#476) used pure-2.7.1 versions for shared-feature files,
dropping fork-only patches 2.7.1 does not provide. Nightly #27 surfaced the
build regressions. Restore them and harden the CD publish path:

- wxMediaCtrl3.cpp: restore #ifndef BAMBUSTUDIO_NO_AVVIDEODECODER guard
  (Win-ARM64 LNK2001: AVVideoDecoder excluded there, 2.7.1 uses it).
- deps/ZLIB 1.2.13 -> 1.3.1 (1.2.13 K&R decls break the macOS 26 SDK).
- MainFrame.cpp: restore __WXGTK__ deferred-geometry (Wayland startup assertion).
- Preset.cpp: restore parent-preset fallback (no silent user-preset deletion).
- cd-nightly.yml + cd-release-candidate.yml: drop BambuStudio_dep_* from the
  release (~800 MB; cd-release already did).
- cd-release-candidate.yml: apply the same signed-tag publish fix as #478
  (the local 'git tag -s' + git/refs API returned HTTP 422 'Object does not
  exist' — push the signed tag directly with a two-step API fallback).

Closes #481

The `Review dependency changes` job blocks all egress except
`api.github.com:443`, but `actions/checkout` needs `github.com:443` for
its git-fetch → checkout fails on every PR (#476, #480). Adds
`github.com:443` to the allowed-endpoints. Workflow-only change — no
build impact.

Closes #479

The 2.7.1 update (#476) used pure-2.7.1 versions for shared-feature
files, which dropped fork-only patches 2.7.1 doesn't have. Nightly #27
surfaced the regressions. This restores them:

| Patch | Fixes |
|---|---|
| wxMediaCtrl3 `BAMBUSTUDIO_NO_AVVIDEODECODER` guard | Windows-ARM64
`LNK2001` (AVVideoDecoder) |
| zlib 1.2.13 → 1.3.1 | macOS 26 SDK build (`zError` K&R) |
| MainFrame `__WXGTK__` deferred geometry | Wayland `gtk_window_resize`
startup assertion |
| Preset parent-preset fallback | no silent deletion of user presets |
| cd-nightly drop `BambuStudio_dep_*` | ~800 MB internal deps leaked
into release |

Debian PR build verifies Linux compiles; macOS + Win-ARM64 verified by
the nightly after merge.

…g 21) (#486)

Closes #485

macOS 26 (AppleClang 21) rejects `static constexpr wxMediaState
MEDIASTATE_* = (wxMediaState)N` (cast not constexpr). Switch to `static
inline const` — valid everywhere, restores a fork patch dropped in #476.
Only macOS 26 was affected.