Vendor Tailwind and daisyUI in the repo; never reach github.com

Builds used to download the Tailwind binary and the daisyUI plugins from GitHub
releases. They are now committed in tools/tailwind/:
- the Tailwind 4.3.3 standalone binary for linux-x64, xz -9e compressed (28 MB);
- daisyui.mjs and daisyui-theme.mjs 5.7.47;
- daisyUI's llms.txt component reference;
- Tailwind's MIT license.

tools/tailwind.sh no longer touches the network. "prepare" checks every file
against its pinned sha256 and unpacks the binary into .tools/. MSBuild reruns it
only when the archive or the script changes. A build from scratch was checked
inside a network namespace with no network at all.

.gitattributes keeps the vendored files byte-exact, and Tailwind no longer scans
tools/, whose llms.txt names every daisyUI class.

Both workflows used actions/checkout, which a Gitea runner downloads from
github.com. They now git fetch the commit from this Gitea, as they already did
for SocialPub.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LsXgEaXee4GCU1hwYgPJXw

Styles/app.css

@@ -1,11 +1,13 @@
 /* Entry point compiled by Tailwind CSS standalone (tools/tailwind.sh, TailwindCompile in decePubClient.csproj) into
-   wwwroot/css/app.css. Tailwind scans every file under the project that .gitignore doesn't exclude. */
+   wwwroot/css/app.css. Tailwind scans every file under the project that .gitignore doesn't exclude, except tools/
+   (daisyui-llms.txt names every daisyUI class) and the vendored CSS. */
 @import "tailwindcss" source("../");
 
 @source not "../wwwroot/vendor";
 @source not "../Docs";
+@source not "../tools";
 
-@plugin "../.tools/tailwind/daisyui.mjs" {
+@plugin "../tools/tailwind/daisyui.mjs" {
 	themes: false;
 	logs: false;
 }