ci: qualify supported macOS emulation before Recovery download

.gitea/workflows/macos-native-diagnostic.yaml

@@ -1,4 +1,4 @@
-name: macOS 13 KVM Cryptex Recovery compatibility diagnostic
+name: macOS 14 TCG Recovery prerequisite diagnostic
 
 on:
   workflow_dispatch:
@@ -6,7 +6,7 @@ on:
 jobs:
   macos-native-diagnostic:
     runs-on: ubuntu-latest
-    timeout-minutes: 45
+    timeout-minutes: 95
     env:
       DOTNET_SKIP_FIRST_TIME_EXPERIENCE: "1"
       DOTNET_NOLOGO: "1"
@@ -19,7 +19,7 @@ jobs:
         with:
           dotnet-version: "10.0.x"
 
-      - name: Probe macOS 13 Recovery with existing KVM and host CPU
+      - name: Verify actual AVX2 emulation then probe macOS 14 Recovery
         run: dotnet run --file tools/ci/MacOsNativeDiagnostic.cs -- --run --output artifacts/native-macos
 
       - name: Always clean up only this diagnostic's owned resources

.gitea/workflows/pr-push-build-and-test.yaml

@@ -7,6 +7,7 @@ on:
     # Its manual workflow provides that evidence; the PR branch still runs all jobs.
     branches-ignore:
       - codex/macos-ci-kvm-compatibility
+      - codex/macos-ci-tcg-supported
   workflow_dispatch:
 
 jobs: