feat(codex): add native in-place plugin adapter (v4.5.8)

[eliasjudin]

Closes #157.
Supersedes #89.

Summary

• add an in-place Codex manifest, thin marketplace, and dedicated Codex hook configuration
• make bootstrap, preflight, prompt validation, doctor guidance, and the canonical skill host-aware without mirroring skills or changing Claude hook configuration
• use truthful SessionStart absolute paths instead of persistent Codex environment or PATH claims
• extend release linting and CI coverage, and document the native Tier-3 install
• reconcile onto current main (7d04c97, v4.5.7) and release the adapter as v4.5.8

Verification

Deterministic repository gates

• test_codex_adapter.sh: 8/8
• Claude/Codex bootstrap and preflight: 17/17 and 19/19
• prompt validation: 35/35; guardrails: 327/327
• wrapper-runtime: 30/30; release-contract: 8/8; semantic contracts: 31/31
• release-lint probes: 6/6
• all remaining Bash/Python suites, Bash 3.2 smoke, ruff, strict mypy, pinned actionlint, and the CI-equivalent shellcheck invocation passed
• the full documentation lint has the same 111-warning/nonzero baseline on this branch and untouched origin/main; the Codex version-drift probe itself passes

Disposable real-Codex acceptance

• Codex CLI 0.144.6 installed v4.5.8 from the worktree into a fresh disposable cache; the runtime was observed through Codex Desktop app-server 0.145.0-alpha.30
• before trust, $lean4 remained discoverable while all three plugin hooks were reported untrusted and skipped
• the exact SessionStart, UserPromptSubmit, and PreToolUse commands were reviewed through the app-server hook listing and their hashes were explicitly trusted only in the disposable config (the app-server equivalent used because this run was mobile, not a claim that the /hooks UI was opened)
• SessionStart was observed for startup, a cold resume after app-server restart, a clear-source thread, and the first turn after successful compaction
• every SessionStart context path pointed under <CODEX_HOME>/plugins/cache/lean4-skills/lean4/4.5.8, never back to the source worktree, and reported shell_env_persistent=false
• the cached absolute preflight and a representative wrapper succeeded with all LEAN4_* variables unset and plugin bin/ absent from PATH
• UserPromptSubmit passed an ordinary $lean4 prompt, added context for a valid CLI-like invocation, and blocked an invalid invocation
• in a disposable Lean-project directory, PreToolUse allowed a harmless printf and blocked git clean -fd -- <verified-nonexistent-target> before execution; the target remained absent
• cache parity, no-symlink/no-mirror checks, and manifest selection of codex-hooks.json passed; no credentials or normal user cache were copied or logged

GitHub currently reports no checks for the fork branch, so this remains a draft pending maintainer approval of fork workflows, green checks, and review.

Out of scope

• no mirrored package tree or generated focused skills
• no lean4-contribute packaging
• no /lean4:* slash-command parity claim
• PreToolUse remains advisory, project-scoped, and not an enforcement boundary

[eliasjudin]

@cameronfreer PR #159 is now reconciled with current main at v4.5.8, and the draft body includes sanitized disposable Codex app-server acceptance results. GitHub still reports no checks for the fork branch; when convenient, could you approve/run the workflows and review this scoped replacement?