Wire authenticated voice watch notices through an owned native launcher

.gitea/workflows/ci.yml

@@ -32,6 +32,8 @@ jobs:
           "$RUNNER_TEMP/ci-venv/bin/python" -m pytest tests/tools/test_protected_instruction_unattended.py tests/tools/test_file_write_safety.py tests/tools/test_computer_use_approval_isolation.py tests/cli/test_cli_approval_ui.py tests/cli/test_single_query_session_finalize.py -q -p no:cacheprovider -rf
       - name: Codex bridge regression tests
         run: '"$RUNNER_TEMP/ci-venv/bin/python" -m unittest discover -s apps/desktop/assets/codex-bridge'
+      - name: Native watch and speech mux pytest regressions
+        run: '"$RUNNER_TEMP/ci-venv/bin/python" -m pytest apps/desktop/assets/codex-bridge/test_bekci_watch.py apps/desktop/assets/codex-bridge/test_native_speech_mux.py -q -p no:cacheprovider -rf'
       - name: Mobile and desktop startup regression tests
         run: |
           npm install --prefix "$RUNNER_TEMP/mobile-tests" --no-save --ignore-scripts --no-audit --no-fund --legacy-peer-deps vitest@4.1.10 ws@8.21.1
@@ -54,6 +56,13 @@ jobs:
           github-server-url: https://gitea.turkservis.online
       - name: Install locked source dependencies
         run: npm ci --no-audit --no-fund
+      - name: Install Windows launcher cross compiler and framework reference
+        run: |
+          set -eu
+          apt-get update
+          apt-get install -y --no-install-recommends mono-mcs=6.8.0.105+dfsg-3.2 libmono-system-web-extensions4.0-cil=6.8.0.105+dfsg-3.2
+      - name: Compile Windows launcher from source and verify failure gate
+        run: node --test apps/desktop/scripts/build-native-watch-launcher.test.mjs
       - name: Native dependency staging regression tests
         run: npx vitest run --root apps/desktop scripts/stage-native-deps.test.mjs --maxWorkers=2
       - name: Build and package Windows x64