ci: extend macOS race test budget

.github/workflows/ci.yml

@@ -694,7 +694,7 @@ jobs:
           go-version-file: go.mod
 
       - name: Test macOS auth and Keychain paths with Race Detection
-        run: go test -v -race -count=1 -timeout=10m ./internal/keychain ./internal/auth ./internal/app
+        run: go test -v -race -count=1 -timeout=12m ./internal/keychain ./internal/auth ./internal/app
 
   test-windows:
     name: Test (Windows)

test/scripts/changelog_pr_gate_test.go

@@ -537,6 +537,16 @@ func TestChangelogPRFastPathWorkflowContract(t *testing.T) {
 		t.Error("full race shards must retain enough package-level time for internal/app")
 	}
 
+	darwinStart := strings.Index(admission, "\n  test-darwin:\n")
+	darwinEnd := strings.Index(admission, "\n  test-windows:\n")
+	if darwinStart < 0 || darwinEnd <= darwinStart {
+		t.Fatal("Code Admission workflow missing macOS test job boundaries")
+	}
+	darwinJob := admission[darwinStart:darwinEnd]
+	if !strings.Contains(darwinJob, `go test -v -race -count=1 -timeout=12m ./internal/keychain ./internal/auth ./internal/app`) {
+		t.Error("macOS race tests must retain enough package-level time for internal/app")
+	}
+
 	coverageStart := strings.Index(admission, "\n  coverage:\n")
 	coverageEnd := strings.Index(admission, "\n  policy:\n")
 	if coverageStart < 0 || coverageEnd <= coverageStart {