#32114 ci(owned-pool rescue): watch the NEXT signed-host check

Adds .github/workflows/nightly-next-cua-signed-host.yml to SIDE_WORKFLOW_PATHS in scripts/ci/owned_pool_rescue.py, marked feat-cmux-next only.

#28223 adds that workflow on feat-cmux-next. Its Mac job takes the owned side lane through side_lane_placement.py, the same way nightly-next-launch-smoke.yml does. tests/test_ci_owned_pool_sources.py reads main's watch list, so this entry has to land on main before #28223 can pass its guard group. A feat-only entry on main is fine: the test treats an entry with no workflow on a branch as watching nothing there.

Changelog

none

Observed / Not run

• Observed: python3 tests/test_ci_owned_pool_sources.py passes here, and with this entry it also passes on #28223's tree.
• Not run: no Mac or app build (a one-line list entry).

Agent session: agent session

🤖 Generated with Claude Code

---

^{Need help on this PR? Tag @codesmith-bot with what you need.}

---

Summary by cubic

Adds .github/workflows/nightly-next-cua-signed-host.yml to the owned-pool rescue watch list so the guard can track it on feat-cmux-next before the workflow lands via #28223.

• The entry is marked feat-cmux-next only; the watch list is read from main, so this must land here first.
• The test suite treats a watched workflow that doesn't exist on a branch as watching nothing, so the feat-only entry is safe on main.

Summary by CodeRabbit

• Chores
  • CI run discovery and monitoring now include the nightly signed-host workflow, improving coverage of automated checks. This change affects internal release validation and does not alter user-facing app behavior.