chore: bump to v1.27.3 — CI fixes, ring linker fix, draft releases

- fix: CI Windows NSIS upload — let tauri-action handle artifact upload directly
- fix: Linux/AUR ring linker error — cc + -fuse-ld=bfd via .cargo/config.toml
- fix: releases now created as draft for review before publishing
- chore: consolidate 1.27.0–1.27.2 changelog into single entry

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.github/workflows/release.yml

@@ -71,7 +71,7 @@ jobs:
               tag_name: tag,
               name: `Psysonic v${process.env.PACKAGE_VERSION}`,
               body,
-              draft: false,
+              draft: true,
               prerelease: false
             });
             return data.id;
@@ -122,28 +122,9 @@ jobs:
           VITE_LASTFM_API_KEY: ${{ secrets.VITE_LASTFM_API_KEY }}
           VITE_LASTFM_API_SECRET: ${{ secrets.VITE_LASTFM_API_SECRET }}
         with:
-          # Windows: no releaseId — tauri-action would search bundle/msi/ which doesn't exist.
-          # We upload NSIS artifacts manually in the next step.
-          releaseId: ${{ matrix.settings.platform != 'windows-latest' && needs.create-release.outputs.release_id || '' }}
+          releaseId: ${{ needs.create-release.outputs.release_id }}
           args: ${{ matrix.settings.args }}
 
-      - name: upload Windows NSIS artifacts
-        if: matrix.settings.platform == 'windows-latest'
-        shell: bash
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          VERSION: ${{ needs.create-release.outputs.package_version }}
-        run: |
-          NSIS_DIR="src-tauri/target/release/bundle/nsis"
-          # Upload installer (.exe) and updater bundle (.nsis.zip + .nsis.zip.sig)
-          FILES=$(find "$NSIS_DIR" -name "*.exe" -o -name "*.nsis.zip" -o -name "*.nsis.zip.sig" 2>/dev/null)
-          if [[ -z "$FILES" ]]; then
-            echo "No NSIS artifacts found in $NSIS_DIR" >&2
-            ls -la "$NSIS_DIR" || true
-            exit 1
-          fi
-          echo "$FILES" | xargs gh release upload "app-v${VERSION}" --clobber
-
       - name: sign and upload macOS bundle signature
         if: matrix.settings.platform == 'macos-latest'
         shell: bash