chore: bump to v1.27.3 — CI fixes, ring linker fix, draft releases

- fix: CI Windows NSIS upload — let tauri-action handle artifact upload directly
- fix: Linux/AUR ring linker error — cc + -fuse-ld=bfd via .cargo/config.toml
- fix: releases now created as draft for review before publishing
- chore: consolidate 1.27.0–1.27.2 changelog into single entry

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.cargo/config.toml

@@ -1,6 +1,8 @@
-# Use the system GCC linker for Linux targets instead of rust-lld.
-# ring (pulled in by tauri-plugin-updater) contains C/assembly objects that
-# lld cannot resolve on Arch/CachyOS — switching to cc avoids the
-# "undefined symbol: ring_core_*" linker errors.
+# Arch Linux's rust package bakes -fuse-ld=lld into the default rustflags.
+# ring (pulled in by tauri-plugin-updater) ships C/asm objects that lld cannot
+# resolve (ring_core_* symbols). Fix: force cc as linker driver and append
+# -fuse-ld=bfd so it overrides the hardcoded -fuse-ld=lld (last flag wins).
+# bfd is always available via binutils (part of base-devel on Arch).
 [target.x86_64-unknown-linux-gnu]
 linker = "cc"
+rustflags = ["-C", "link-arg=-fuse-ld=bfd"]