Improve CI: build caching, self-contained packages, accurate deb deps

[everoddandeven]

• Cache monero/monero-cpp builds across linux/windows/macos jobs, keyed on the submodule commit (test.yml, build-macos.yml, build-windows.yml)
• Add GHA docker buildx layer cache to build-deb.yml
• Guard codacy.yml against running on a failed/cancelled Tests run
• Scope workflow permissions to contents: read by default
• Build Windows package as a real wheel (pip wheel + delvewheel) instead of a raw dist folder
• Repair macOS wheels with delocate to bundle Homebrew dylibs
• Compute .deb runtime dependencies with dpkg-shlibdeps instead of a hand-maintained per-codename version list
• Bump expat/unbound with checksum verification in Dockerfile.linux
• Add monero-cpp coverage HTML report and summary tables to test.yml
• Pin msys2/setup-msys2 to an exact commit and drop redundant shell: msys2 {0} overrides

[codacy-production]

Not up to standards ⛔

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🔴 Coverage 100.00% diff coverage · -1.70% coverage variation

Metric	Results
Coverage variation	❌ -1.70% coverage variation (-1.00%)
Diff coverage	✅ 100.00% diff coverage

View coverage diff in Codacy

Coverage variation details

	Coverable lines	Covered lines	Coverage
Common ancestor commit (d0ae81a)	12917	11669	90.34%
Head commit (caa6bea)	12918 (+1)	11450 (-219)	88.64% (-1.70%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details

	Coverable lines	Covered lines	Diff coverage
Pull request (#97)	1	1	100.00%

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}