ci: prepare source-bound native macOS build and tests under TCG

.gitea/workflows/pr-push-build-and-test.yaml

@@ -8,6 +8,7 @@ on:
     branches-ignore:
       - codex/macos-ci-kvm-compatibility
       - codex/macos-ci-tcg-supported
+      - codex/macos-native-full-tcg
   workflow_dispatch:
 
 jobs:
@@ -136,6 +137,34 @@ jobs:
           find MeetingAssistant.Tests -type d -name TestResults -print || true
           find MeetingAssistant.Tests -type f -path "*/TestResults/*" -maxdepth 5 -print || true
 
+  macos-native-full:
+    needs: [build-and-test, portable-build-and-test]
+    runs-on: ubuntu-latest
+    timeout-minutes: 180
+    env:
+      DOTNET_SKIP_FIRST_TIME_EXPERIENCE: "1"
+      DOTNET_NOLOGO: "1"
+    steps:
+      - name: Checkout exact native CI candidate
+        uses: actions/checkout@v7
+      - name: Setup .NET orchestration SDK
+        uses: actions/setup-dotnet@v6
+        with:
+          dotnet-version: "10.0.x"
+      - name: Run owned macOS 14 TCG guest and all native tests
+        run: dotnet run --file tools/ci/MacOsNativeDiagnostic.cs -- --run --full --output artifacts/native-macos-full
+      - name: Always remove only this run's owned resources
+        if: always()
+        run: dotnet run --file tools/ci/MacOsNativeDiagnostic.cs -- --cleanup --output artifacts/native-macos-full
+      - name: Retain native build, signatures, TRX and guest receipts
+        if: always()
+        uses: actions/upload-artifact@v3
+        with:
+          name: native-macos-full
+          path: artifacts/native-macos-full/
+          if-no-files-found: error
+          retention-days: 7
+
   portable-build-and-test:
     runs-on: ubuntu-latest
     env: