ci: adopt main's test-android gating and CMake-pin removal after rebase

Reconcile the pnpm-migrated check.yml with two changes that landed on main
while this branch was in review:

- #382 fixed the CMake 4.2 framework-HEADERS root cause in
  weak-node-api/CMakeLists.txt (included via the rebase) and removed the
  now-redundant "Install compatible CMake version" pin from all five macOS
  jobs. Drop those steps here too; CMAKE_VERSION is retained since
  test-android still uses it to select the Android SDK cmake package.
- #380 gated test-android to labeled PRs only (the ubuntu-self-hosted runner
  is offline and otherwise leaves the job queued forever on main).

With this, check.yml differs from main purely by the pnpm conversion.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DnwodAoNbqPec77191HVXn

Author: claude

.github/workflows/check.yml

@@ -103,12 +103,6 @@ jobs:
         with:
           packages: tools platform-tools ndk;${{ env.NDK_VERSION }}
       - run: rustup target add x86_64-linux-android aarch64-linux-android armv7-linux-androideabi i686-linux-android aarch64-apple-ios-sim
-      # macOS runners ship a newer CMake than the project supports; pin it to match the version used elsewhere in CI
-      - name: Install compatible CMake version
-        if: runner.os == 'macOS'
-        uses: jwlawson/actions-setup-cmake@v2
-        with:
-          cmake-version: ${{ env.CMAKE_VERSION }}
       - run: pnpm install
       - run: pnpm run bootstrap
       - run: pnpm test
@@ -138,12 +132,6 @@ jobs:
         uses: hendrikmuhs/ccache-action@v1.2
         with:
           key: ${{ github.job }}-${{ runner.os }}
-      # macOS runners ship a newer CMake than the project supports; pin it to match the version used elsewhere in CI
-      - name: Install compatible CMake version
-        if: runner.os == 'macOS'
-        uses: jwlawson/actions-setup-cmake@v2
-        with:
-          cmake-version: ${{ env.CMAKE_VERSION }}
       - run: pnpm install
       - run: pnpm run build
       - name: Prepare weak-node-api
@@ -183,11 +171,6 @@ jobs:
         with:
           packages: tools platform-tools ndk;${{ env.NDK_VERSION }}
       - run: rustup target add x86_64-linux-android aarch64-linux-android armv7-linux-androideabi i686-linux-android aarch64-apple-ios-sim
-      # macOS runners ship a newer CMake than the project supports; pin it to match the version used elsewhere in CI
-      - name: Install compatible CMake version
-        uses: jwlawson/actions-setup-cmake@v2
-        with:
-          cmake-version: ${{ env.CMAKE_VERSION }}
       - run: pnpm install
       - run: pnpm run bootstrap
         env:
@@ -226,10 +209,6 @@ jobs:
         with:
           java-version: "17"
           distribution: "temurin"
-      - name: Install compatible CMake version
-        uses: jwlawson/actions-setup-cmake@v2
-        with:
-          cmake-version: ${{ env.CMAKE_VERSION }}
       - run: rustup target add x86_64-apple-darwin
       - run: pnpm install
       - run: pnpm run bootstrap
@@ -251,7 +230,11 @@ jobs:
         env:
           MOCHA_REMOTE_CONTEXT: allTests
   test-android:
-    if: github.ref == 'refs/heads/main' || contains(github.event.pull_request.labels.*.name, 'Android 🤖')
+    # Temporarily gated to labeled PRs only: the ubuntu-self-hosted runner is
+    # offline, so running this on main pushes leaves the job queued forever and
+    # blocks the whole Check run from completing. Re-enable on main once the
+    # self-hosted runner is back. Tracked in #379.
+    if: contains(github.event.pull_request.labels.*.name, 'Android 🤖')
     name: Test app (Android)
     runs-on: ubuntu-self-hosted
     steps:
@@ -366,11 +349,6 @@ jobs:
           distribution: "temurin"
       - run: rustup target add x86_64-apple-darwin x86_64-apple-ios aarch64-apple-ios aarch64-apple-ios-sim
       - run: rustup toolchain install nightly --component rust-src
-      # macOS runners ship a newer CMake than the project supports; pin it to match the version used elsewhere in CI
-      - name: Install compatible CMake version
-        uses: jwlawson/actions-setup-cmake@v2
-        with:
-          cmake-version: ${{ env.CMAKE_VERSION }}
       - run: pnpm install
       - run: pnpm run build
       - name: Build weak-node-api for all Apple architectures