Deriving the zeros of this video amplifier circuit
Because the example given in the post is overly complicated and would require many steps, I am going to show how to determine the numerator \$N(s)\$ of a simple 2nd-order \$RLC\$ network as shown below. For this purpose, I will apply several methods that I described in my book on transfer functions and fast analytical circuits techniques (FACTs):

To determine an impedance \$Z\$ - which is a transfer function - you install a test generator \$I_T(s)\$ injecting a current (the stimulus) between the terminals across which you will observe the response \$V_T(s)\$. The impedance is then \$Z(s)=\frac{V_T(s)}{I_T(s)}\$. In the below case, this expression can be expressed as \$Z(s)=R_0\frac{N(s)}{D(s)}\$. The term \$R_0\$ represents the resistance offered by the impedance expression for \$s=0\$. Without writing a line of algebra, you immediately see that this resistance is the parallel combination of \$r_L\$ and \$R_1\$: \$R_0=r_L||R_1\$. The numerator can be written as \$N(s)=1+a_1s+a_2s^2\$ while the denominator is \$D(s)=1+b_1s+b_2s^2\$.
Now, to determine the numerator, we have several choices:

a null double injection or NDI: you keep the current source \$I_T\$ in place and you determine the resistance \$R\$ offered by one of the energy-storing elements while the response is a null. A null means that despite the presence of an ac excitation (the stimulus) it does not propagate in the circuit to generate a response. A bit like if the stimulus was lost in the network for a certain frequency value and the response was 0 V ac. What is good with an impedance determination is that a 0-V response across a current source is similar to replacing the current source by a short circuit. This is called a degenerate case.

Inspection: this is the fastest and most efficient way to determine the zeroes. You observe the circuit and realize that a some branches could cause a transformed short circuit across the current source. And if this branch is a transformed short at a certain frequency (the zero frequency), then the response across the current source \$I_T\$ is 0 V and this is the manifestation of one zero.

generalized approach: by reusing the time constants obtained for the denominator, we can, via the determination of high-frequency gains, reuse these time constants and obtain the numerator without resorting to NDIs. This is a simpler approach sometimes but you obtain a slightly more complicated result than with an NDI. From this technique, we can immediately infer if we have zeroes in a circuit and how many: place one of the energy-storing element in its high-frequency state and check that if you stimulate the circuit (via the current source in this impedance exercise), you have a response \$V_T\$. When \$C_1\$ is replaced by a short (its high-frequency state) and \$L_1\$ is left in its dc state (a short), then if you excite via \$I_T\$, you can measure a voltage \$V_T\$: \$C_1\$ contributes a zero. Should you have the same circuit without \$r_C\$, then shorting \$C_1\$ would cancel \$V_T\$ and there would be no response despite the stimulus presence. So no zero without \$r_C\$. Do the same for \$L_2\$, then when both \$C_1\$ and \$L_2\$ are in their high-frequency state and you have two zeroes in \$N(s)\$.


Let's start with the NDI. As explained, an NDI is performed with the excitation \$I_T\$ brought back in the circuit. The exercise consists of determining the resistance \$R\$ &quot;seen&quot; from the energy-storing element terminals when the voltage \$V_T\$ across the current source is a null or 0 V. 0 V across a current source is similar to having the same current source replaced by a wire:

The time constants in this mode are simply involving the cap and the inductor equivalent series resistances (ESR). With these elements on hand, we can assemble our first coefficient: \$a_1=r_CC_1+\frac{L_2}{r_L}\$. How can we be sure this is the right way to go with this NDI? In other words, is there any other possibility to experimentally verify that it works this way, that I truly cancel the response across the current source? Sure, and this is what I presented in the book with a SPICE simulation involving a voltage-controlled current-source:

The source \$G_1\$ adjusts the injected current in \$C_1\$'s terminals to maintain 0 V across the source. The voltage across the terminals divided by the injected current is computed by the in-line equation \$B_1\$ and you read 120 m after the bias point calculation. This is well the ESR of \$C_1\$. You can do the same exercise with \$L_2\$ of course. The computed bias value should be the exact value found with a solver.
Now that we have these two time constants, we can look for the second-order term obtained when \$C_1\$ is replaced by a short and we &quot;look&quot; through \$L_2\$'s terminals to obtain the resistance we want:

Once we are here, we can write the second-order term as \$a_2=r_CC_1\frac{L_2}{r_L}\$. The complete denominator can thus be expressed as \$N(s)=1+s(r_CC_1+\frac{L_2}{r_L})+s^2(r_CC_1\frac{L_2}{r_L})\$. From this expression, we could then determine a quality factor \$Q_N=\frac{\sqrt{a_2}}{a_1}\$ and a resonant angular frequency \$\omega_0=\frac{1}{\sqrt{a_2}}\$. However, we could also try to rework it as a product of factors and that's where inspection is of great help.
As explained with the NDI, the zero manifests itself by the disappearance of the response when the network is excited at a zero frequency. In our example, it would mean that you tune the current source \$I_T\$ to a frequency where suddenly the voltage across its terminals becomes 0 V. This would happen if the network involving \$C_1\$ and \$r_C\$ or \$L_2\$ and \$r_L\$ would become a transformed short circuit. In this case, the zeroes are immediately determined as shown below:

And, finally, the third method involves determining high-frequency expressions when the energy-storing elements are alternately set in their high-frequency state. In this case, you determine simple gain values and reuse the time constants already obtained when finding \$D(s)\$. This is how it goes for the three expressions \$H^1\$, \$H^2\$ and \$H^{12}\$:

We can then gather all these numbers in a Mathcad sheet and compare the results with the brute-force expression shown in the upper right corner:

If we plot the magnitude and phase responses of all these transfer functions, they are all identical:

So we have seen three different ways to determine the zeroes of a transfer function using the FACTs. The simplest and fastest way is inspection as you can see. Sometimes, unfortunately, it is not possible and you need to resort to NDI. To that respect, SPICE and its bias point calculation are a treasure and helped me find mistakes in many occasions with complicated circuits. And, following Ali Hajimiri method, the high-frequency calculations can be seen as a way to skip NDI but it ends up in more complicated coefficients that you must (or not) simplify. The good thing is that all results are rigorously identical but expressed in different ways.
Acquiring the skill to determine transfer functions using FACTs requires time and efforts but they are worth it in the end. If you start with simple passive examples of 1st- and 2nd-order, then complicate the circuits smoothly, you will succeed solving more complicated active circuits as I have tried to modestly promote in my book.