fix(codex): allow scheduled issues to commit reports

[claekchen]

Summary

• launch headless Codex with the same unattended host access used by interactive sessions
• allow scheduled Issues to commit generated reports before Inbox delivery
• update the command composition regression test

Root cause

Codex workspace-write protects .git, so scheduled report Issues could write report files but failed at git add with an index.lock permission error. Their delivery contract correctly refused to push an uncommitted report, causing the notification to be missed.

Verification

• pnpm vitest run src/workspaces/adapters/ai-config.spec.ts (105 passed)
• pnpm build:server

[vercel]

@claekchen is attempting to deploy a commit to the luokerenx4's Team Team on Vercel.

A member of the Team first needs to authorize it.

[claekchen]

Validation completed on fork commit d41a4e3b:

• Full CI (test, build, Ubuntu/Windows dev-smoke, macOS/Windows cross-platform): https://github.com/claekchen/OpenAlice/actions/runs/32855819323
• Docker Smoke: https://github.com/claekchen/OpenAlice/actions/runs/32855824890
• Local regression: 105 adapter tests passed; pnpm build:server passed.
• Live probe: codex --sandbox danger-full-access --ask-for-approval never exec successfully staged a file inside a temporary Git repository, covering the .git/index.lock failure mode.
• Native service restarted healthy; both missed Inbox entries were replayed and Feishu delivery logged delivery.succeeded.

The upstream fork PR workflows remain approval-gated for an external contributor, so the same commit was explicitly dispatched and verified on the fork.