Cardano Updates

- Use error with descriptive messages instead of silently changing
  semantics (e.g. returning default values)
- Replace NE.!! with pattern matching in LayerSpec.hs
- Extract minPort/maxPort as top-level definitions to avoid repetition
- Use case pattern matching instead of tail/drop 1 to preserve crash
  semantics on impossible cases

- CheckpointsSpec: drop 1 → pattern match with error (not vacuous True)
- SequentialSpec/SharedSpec: BS.drop 1 → BS.uncons with error
- db-bench: restore error on empty range instead of silent "[]"
- RangeSpec: fromJust (also partial) → explicit pattern match
- TxSeq: restore infinite lists instead of truncating to 1001 elements

## Summary

- Suspend macOS dev shell Attic cache push — broken by stale `pallas`
fetchGit reference upstream
- See #5120 for details

## Test plan

- [x] No functional impact — only affects cache warming on master pushes

Install 4 GHA runners on cf-hal-win (10.1.21.15) with labels
cardano-wallet-win. Switch all Windows test jobs to self-hosted.

Tests need test/data/ relative to CWD for golden files.

Build cross-compiled on Linux, tests run on Windows runners.
Manual dispatch only — pending Windows runners setup and
fixes for #5107 (OOM) and #5110 (TLS).

Build release package and testing bundle for Windows via
Nix cross-compilation (ucrt64) on Linux runners.

No need for self-hosted Windows runners — artifacts are
cross-compiled on Linux, tests run on windows-latest.

All macOS workflows set to workflow_dispatch only.
Re-enable push/pull_request triggers when macOS
self-hosted runners are available.