ci(patch): fetch v14 baseline from public release URL without a token

Greptile flagged that `gh release download` with `github.token` could be
rejected for fork pull requests (token scoped to the fork, asset in
frappe/erpnext). The release is public and published, so the asset is
downloadable anonymously from objects.githubusercontent.com — drop the token
and curl the public URL directly. Removes the cross-repo token dependency and
keeps fork PRs working. Cloudflare is still bypassed since GitHub serves the
asset, not frappe.io.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.github/workflows/patch.yml

@@ -76,9 +76,10 @@ jobs:
 
       - name: Download erpnext v14 backup
         if: steps.cache-v14.outputs.cache-hit != 'true'
-        run: gh release download v14-baseline -R frappe/erpnext -p erpnext-v14.sql.gz -O ~/erpnext-v14.sql.gz
-        env:
-          GH_TOKEN: ${{ github.token }}
+        run: |
+          curl -fSL --retry 5 --retry-all-errors --retry-delay 5 \
+            -o ~/erpnext-v14.sql.gz \
+            https://github.com/frappe/erpnext/releases/download/v14-baseline/erpnext-v14.sql.gz
 
       - name: Cache pip
         uses: actions/cache@v4