fix python 3.14.5 and 3.7.4-3.10.x darwin builds

[domenkozar]

Summary

• 3.14.5 (Build failed for python 3.14.5 #127): Filter out hacl-static-ldeps-for-static-modules.patch for 3.14.5+, since the fix was merged upstream in CPython 3.14.5 (gh-146264: Use static HACL deps for static module builds python/cpython#146265). Nixpkgs still applies the patch for the whole 3.14.x range, which broke when our source override pulls in 3.14.5.
• 3.7.4-3.10.x on darwin (Python 3.10 fails to apply python-3.x-distutils-C++.patch #115): Nixpkgs commit NixOS/nixpkgs@77ca0804 ("python310: drop") removed the local `./3.7/python-3.x-distutils-C++.patch`, leaving a `fetchpatch` fallback that no longer applies cleanly to 3.7.4+. Vendor the working pre-drop patch and reapply it via `replacePatch` for the affected range. Only impacts darwin builds since `hasDistutilsCxxPatch = !stdenv.cc.isGNU`.

Fixes #127
Fixes #115

Test plan

• `nix build .#"3.14.5"` succeeds against pinned nixpkgs (25.11)
• `nix build .#"3.14.5"` succeeds against nixpkgs master (which contains the offending hacl patch)
• `nix build .#"3.14.4"` still succeeds against master (patch still applied as before)
• `patch -p1 --dry-run` of vendored distutils-C++ patch applies cleanly to 3.7.4, 3.7.17, 3.8.20, 3.9.23, and 3.10.20 sources
• CI passes on darwin (Linux skips the distutils-C++ patch entirely)

🤖 Generated with Claude Code