fix(ci): bound stalled Apple probes and record verified native APK

Mac Node bootstrap and checkout now pass, but Apple-tool preflight stalled after Xcode version output for twenty minutes. Add per-command deadlines and diagnostics without changing licenses/host settings; fourteen preflight/probe regressions pass. Record successful Android build/upload, downloaded APK signature/version and emulator install/launch, and unchanged missing-KVM matrix failures. No Apple app success is claimed.

docs/validation.md

@@ -21,7 +21,7 @@ not included in the native suites or counted toward native completion.
 | Android packages | Debug APK and unsigned release APK/AAB built successfully |
 | Swift portable suite | 16 passed; actual Foundation transport/contracts and URL/metadata policy, not Apple UI/Keychain execution |
 | Swift formatting/parsing | Strict format lint and parsing passed, including Apple-only sources |
-| Script regressions | 10 runner-preflight, 8 JUnit-evidence and 5 screenshot-output tests passed |
+| Script regressions | 14 runner-preflight/Apple-probe, 8 JUnit-evidence and 5 screenshot-output tests passed |
 | Repository/workflows | Source invariants, Python compilation, diff whitespace and actionlint for all 3 Gitea workflows passed |
 | OSV | No listed advisories for 266 locked/direct Maven coordinates and plugins; not a security audit |
 
@@ -51,10 +51,31 @@ Evidence paths in the local external build directory:
   `/home/neste/yuvomi-native-integration-final.log`,
   `/home/neste/yuvomi-native-swift.log`.
 
+## Observed Gitea results for source `40a7962`
+
+- Android run #5 (global run 660), build job 1059: **success**, including packages,
+  JVM/lint, formatting/repository/script checks, OSV and both artifact uploads.
+- The actual `android-native-debug-apk` ZIP was downloaded. It contains exactly
+  `app-debug.apk`, version `0.2.0-native-preview`/code 2; APK v2 signature verified,
+  no fixture certificate/private-key files, installed and launched on the local
+  authorized API-35 emulator. SHA-256 of the downloaded APK:
+  `48d58ba5663b2e4fe563064efc567732e8ea35588cb610660f60406e82ccf610`.
+  Its ephemeral CI debug certificate differs from the local development key, so
+  its checksum intentionally differs from the locally collected APK.
+- [Download the verified native debug artifact](https://git.nesterovic.cc/nessi/Yuvomi-App/actions/runs/660/artifacts/android-native-debug-apk)
+  (repository access required; normal 14-day artifact retention applies).
+- Remote jobs 1060/1061 (API 35/37.0): **failed preflight** because `/dev/kvm` was
+  not exposed/writable. They executed no emulator tests. The matrix is not green.
+- iOS run #6 (global 661), job 1062: verified native Node bootstrap and checkout
+  **succeeded**. Xcode 27.1/build 27A9275 printed, but the subsequent Apple-tool
+  preflight did not return during a 20-minute observation. No SwiftUI compile or
+  simulator/XCTest/Keychain/device success is claimed. Bounded, named tool probes
+  now fail with actionable diagnostics instead of silently hanging for the job's
+  full hour; their actual next Mac result still needs inspection.
+
 No Apple SDK application build, simulator UI test or physical-device result is
-claimed from these Linux runs. The modified Mac bootstrap and remote APK upload
-still require inspection of the next actual Gitea run. Prior remote emulator jobs
-failed KVM preflight; the prerequisite was not weakened or counted as passing.
+claimed from the Linux runs or the stalled Mac job. Runner prerequisites were
+not weakened or counted as passing, and no host license/settings were changed.
 
 ## Commands