Resolve macOS CI auth/keychain job conflicts by keeping main's focused 6m keychain/auth split and unsigned-darwin self-heal filter, while retaining this branch's portable DPAPI export/import diagnostics coverage. Co-authored-by: Cursor <cursoragent@cursor.com>