Incant action callbacks for connecting OpenAI Codex OAuth accounts.

These callbacks run inside the live LLMProxy service process, so token storage uses the already-running repo/QuackDB connection instead of starting release task storage in a second VM.