ci: prepare source-bound native macOS build and tests under TCG

.gitea/workflows/macos-native-full.yaml

@@ -0,0 +1,32 @@
+name: Native macOS build and tests on Ubuntu (experimental)
+
+on:
+  workflow_dispatch:
+
+jobs:
+  macos-native-full:
+    runs-on: ubuntu-latest
+    timeout-minutes: 180
+    env:
+      DOTNET_SKIP_FIRST_TIME_EXPERIENCE: "1"
+      DOTNET_NOLOGO: "1"
+    steps:
+      - name: Checkout exact native CI candidate
+        uses: actions/checkout@v7
+      - name: Setup .NET orchestration SDK
+        uses: actions/setup-dotnet@v6
+        with:
+          dotnet-version: "10.0.x"
+      - name: Run owned macOS 14 TCG guest and all native tests
+        run: dotnet run --file tools/ci/MacOsNativeDiagnostic.cs -- --run --full --output artifacts/native-macos-full
+      - name: Always remove only this run's owned resources
+        if: always()
+        run: dotnet run --file tools/ci/MacOsNativeDiagnostic.cs -- --cleanup --output artifacts/native-macos-full
+      - name: Retain native build, signatures, TRX and guest receipts
+        if: always()
+        uses: actions/upload-artifact@v3
+        with:
+          name: native-macos-full
+          path: artifacts/native-macos-full/
+          if-no-files-found: error
+          retention-days: 7