[caamer20]

MP4 Media uploads with valid trailing metadata were incorrectly marked non-streamable by 4.1.1. Follow Telegram Desktop 7.3.1's atom-search decision order so local and URL uploads carry the expected streaming flag, while retaining full bounded container validation and the original bytes.

The media viewer also had text actions constrained to 32 px icon widths, causing overlapping labels. Give labeled actions their own sizing, group and wrap playback controls, keep video/audio viewers and expanded details within the viewport, and anchor badges to the video. Match the closed-control appearance of native dropdowns across playback, slideshow, settings, sync and workspace forms, preserving keyboard selection and touch targets.

Update Rustls to 0.23.46 to resolve the four upstream advisories reported by the dependency gate. No waiver or baseline change.

Keep packaged smoke cleanup strict while allowing briefly locked private WebView profiles to settle after the owned Windows Job is confirmed empty. Retry only the existing exact profile/root removals with bounded filesystem backoff; persistent locks still fail. Windows application-boundary journeys hold real external file locks through shutdown and cover transient recovery plus persistent failure.

Validation:

• Existing large-container journey failed before the streaming correction; all 215 local native journeys passed afterward.
• All 133 existing browser journeys passed, including captions, sync, slideshow, visual, accessibility and TV keyboard navigation checks. Shared select styling is opt-in so raw native fields retain their geometry.
• Production TypeScript/Vite build and bundle budgets, localization, app security, E2E policy, Rust formatting/Clippy and Rust dependency policy checks passed locally. All final CI gates passed before merging/tagging, including Windows, Linux, macOS Intel and Apple Silicon installer builds and actual packaged startup checks.
• Inspected actual player layouts in desktop, short-window, narrow, light and Arabic/RTL browser previews; exercised speed, skip, finish, bookmarks, sleep and fallback video/audio with simulated native boundaries.
• Release-assurance and smoke CLI E2E: 18 passed locally; four Windows-specific cases skipped on macOS. Windows CI passed all eight smoke-harness journeys, including both new real-lock cases, and the actual NSIS installer startup check. New fixture teardown independently reaps both owned processes even after cleanup errors.
• Fresh CI passed all 133 browser journeys and 215 central native journeys. The first Intel attempt passed DMG app readiness but failed on a busy DMG detach before reaching the archive; one unchanged rerun completed DMG readiness, successful detach and updater-archive readiness. The earlier failure evidence is retained; no test was bypassed.
• Read-only supporter release preflight passed; lifetime activation, pricing, recovery, device allowance and secure identifiers are unchanged.

Automated Telegram boundaries are controlled fixtures. The owner's upload and streaming/seeking of the actual video over 200 MB on a clean Windows Telegram Desktop receiver is pending post-release acceptance. No new 200 MB test was added. Native select popup rendering remains OS-controlled.

Android projects, source, signing material and temporary UI preview files are excluded from the outgoing commits. Existing Android release assets are unchanged.