Don't use hardcoded delete_post capability for custom post types

[swissspidy]

The post list table as well as the publish meta box use the delete_post capability to check whether a user can delete or trash a post.

However, when registering a post type with a custom capability base, e.g. product, the actual capability will be delete_product.

The same goes for the capability check inside attachment_submit_meta_box() and perhaps other places too.

Related: #30991.

[swissspidy]

get_delete_post_link() has the same wrong check apparently.

[swissspidy]

Invalid, since this is handled by map_meta_cap