macOS test fix: key _resolve_shim_target off is_symlink + switch Linux CI to self-hosted

1. ``tests/test_playwrightprovider.py::_resolve_shim_target``: on macOS
   ``$TMPDIR`` lives under ``/var/folders/...`` → ``/private/var/...``,
   so ``shim.resolve()`` always differs from ``shim`` even for a plain
   regular file. The previous ``resolved != shim`` short-circuit
   skipped the shell-script parsing and returned the shim path itself.
   Key the branch off ``is_symlink()`` instead so the shell-script
   case (macOS ``.app`` bundle, where a plain symlink would break
   dyld's ``@executable_path``-relative Framework loading) actually
   parses the ``exec '<path>'`` line.

2. Switch Linux CI jobs (precheck, discover-*, build matrix Ubuntu
   entries, live-integration Linux entries, deploy-pages, release) from
   ``ubuntu-latest`` to the org's new self-hosted Linux runner. macOS
   matrix entries keep ``macOS-latest`` since the self-hosted runner is
   x64 Linux only.

Author: claude

.github/workflows/deploy-pages.yml

@@ -16,7 +16,7 @@ concurrency:
 
 jobs:
   build:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     timeout-minutes: 20
     steps:
       - name: Checkout
@@ -48,7 +48,7 @@ jobs:
     environment:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     needs: build
     timeout-minutes: 20
     steps:

.github/workflows/release.yml

@@ -19,7 +19,7 @@ concurrency:
 
 jobs:
   release-state:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     timeout-minutes: 20
     steps:
       - uses: actions/checkout@v6

.github/workflows/tests.yml

@@ -19,7 +19,7 @@ concurrency:
 
 jobs:
   precheck:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     timeout-minutes: 20
 
     steps:
@@ -49,7 +49,7 @@ jobs:
 
   discover-standard-tests:
     needs: precheck
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     timeout-minutes: 20
     outputs:
       test-files: ${{ steps.set-matrix.outputs.test-files }}
@@ -88,9 +88,9 @@ jobs:
       max-parallel: 20
       matrix:
         target:
-        - os: ubuntu-latest
+        - os: self-hosted
           python_version: '3.11'
-        - os: ubuntu-latest
+        - os: self-hosted
           python_version: '3.14'
         - os: macOS-latest
           python_version: '3.13'
@@ -219,7 +219,7 @@ jobs:
 
   discover-live-tests:
     needs: precheck
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     timeout-minutes: 20
     outputs:
       live-tests: ${{ steps.set-matrix.outputs.live-tests }}
@@ -239,9 +239,9 @@ jobs:
             needs_docker=true
           fi
 
-          os_targets="ubuntu-latest macOS-latest"
+          os_targets="self-hosted macOS-latest"
           if grep -q "@pytest.mark.docker_required" "$test_file" || grep -q "@pytest.mark.root_required" "$test_file" || grep -q 'skipif("darwin"' "$test_file"; then
-            os_targets="ubuntu-latest"
+            os_targets="self-hosted"
           elif grep -q 'require_tool("brew")' "$test_file" && ! grep -q 'require_tool("apt-get")' "$test_file" && ! grep -q "operations.apt.packages" "$test_file" && ! grep -q "ansible.builtin.apt" "$test_file"; then
             os_targets="macOS-latest"
           fi

tests/test_playwrightprovider.py

@@ -14,21 +14,23 @@ def _resolve_shim_target(shim: Path) -> Path:
 
     On Linux the shim is a symlink, so ``.resolve()`` naturally follows
     it. On macOS the shim is a shell script that ``exec``s the binary
-    inside a ``.app`` bundle (a symlink would leave the browser launching
-    without bundle context), so ``.resolve()`` just returns the script
-    path. Parse the ``exec <path>`` line to recover the target in that
-    case.
+    inside a ``.app`` bundle (a direct symlink breaks dyld's
+    ``@executable_path``-relative Framework loading), so ``.resolve()``
+    just returns the script path itself. Parse the ``exec <path>`` line
+    to recover the target in that case. We key off ``is_symlink()``
+    rather than comparing ``shim == shim.resolve()`` because macOS
+    ``$TMPDIR`` lives under ``/var/folders/...`` → ``/private/var/...``,
+    so ``resolve()`` always differs from the input even for plain files.
     """
-    resolved = shim.resolve()
-    if resolved != shim:
-        return resolved
+    if shim.is_symlink():
+        return shim.resolve()
     try:
         script = shim.read_text(encoding="utf-8")
     except OSError:
-        return resolved
+        return shim.resolve()
     match = re.search(r"exec '([^']+)'", script)
     if not match:
-        return resolved
+        return shim.resolve()
     return Path(match.group(1)).resolve()