ci(consolidation): budget the cold n0 link

Run 29699083578 proved the n0 job timeout was build topology, not renderer output: n0_dev completed its cold release build in 16m24s, then cargo selected a second skia-bindings graph for gate and was cancelled 12m40s later at the 30-minute job ceiling. The candidate and upload steps never ran, and the interrupted cache save failed.

Build n0_dev and gate in one Cargo invocation so their features resolve once, execute the resulting gate binary directly, and retain a 45-minute cold-host ceiling. The fail-closed sequence is unchanged: an unblessed failure may produce a complete review-only candidate, then the job remains red until that candidate is deliberately adopted.

Gate evidence: the exact combined release build passes locally; direct non-owner gate execution passes shots, replay, differential, cache, and timing paths; YAML parsing and git diff checks pass. Frozen format and published package surfaces remain untouched.

Author: softmarshmallow

.github/workflows/consolidation-gates.yml

@@ -213,7 +213,7 @@ jobs:
     needs: scope
     if: needs.scope.outputs.engine == 'true'
     runs-on: ubuntu-24.04
-    timeout-minutes: 30
+    timeout-minutes: 45
     env:
       FORCE_SKIA_BINARIES_DOWNLOAD: "1"
       N0_GATE_HOST_ID: github-actions-ubuntu-24.04-x86_64
@@ -271,21 +271,22 @@ jobs:
           cache-workspace-crates: true
           cache-on-failure: true
 
-      - name: Build the shot host
-        run: cargo build --locked --release -p n0_dev
+      - name: Build the shot host and gate together
+        run: >-
+          cargo build --locked --release
+          -p n0_dev -p n0
+          --bin n0_dev --bin gate
 
       - name: Run the n0 gate
         id: gate
         continue-on-error: true
-        run: cargo run --locked --release -p n0 --bin gate
+        run: target/release/gate
 
       - name: Produce a review-only baseline candidate
         if: steps.gate.outcome == 'failure'
         id: candidate
         continue-on-error: true
-        run: >-
-          cargo run --locked --release -p n0 --bin gate --
-          --bless-shots --bless-bench
+        run: target/release/gate --bless-shots --bless-bench
 
       - name: Upload the review-only baseline candidate
         if: >-