tokenSaver 1.0.7 — Host isolation and accounting fixes

• Keep envelope-detected Codex selection across hook configuration modules.
• Honor CODEX_HOME, CLAUDE_CONFIG_DIR and the Codex plugin-home SQL-policy override.
• Isolate both hosts' settings in the test runner; inherited session markers cannot redirect fixtures to real settings.
• Skip Claude status-line checks in Codex doctor; align recall with explicit CLI host selection.
• Recompute saved aggregates after merging session slices and repair lifetime reads of stale aggregates.
• Separate cached and cache-written Codex input before calculating costs; reject savings credit for failed MCP outputs, including exec wrappers.
• Prevent transcript model names from modifying object prototypes or resolving inherited pricing entries.
• Align review instructions with available collaboration schemas and concurrency limits; document Bash and PowerShell commands separately.
• Correct settings instructions and expose updateCheck through the CLI.
• Add nine regression tests. Validation: 248 passed, four DuckDB tests skipped when its CLI is unavailable.

Existing recorded cost estimates retain their original calculation; new transcript deltas use the corrected accounting.