Extract admin post type resolution and add unit tests. Same CPT save allow-list as 1.5.1 (no 403 on classic post.php save). Native posts, categories and tags stay blocked.
Note: 1.5.1 already contains the functional CPT save fix. Sites still pinned to 1.5.0 should bump to 1.5.1 or 1.5.2.