Provider adapter for a locally installed and authenticated Codex CLI.
Each harness session owns an isolated codex app-server connection. The
default :subscription auth mode requires a local ChatGPT-backed Codex
profile and suppresses API-key environment overrides; use :inherit only
when API or custom environment authentication is intentional.