[codex] convert evals to cli-evals

[kreneskyp]

Summary

• add cli-agent-evals.config.mjs using the shared @agent-ix/cli-agent-evals suite API
• route make evals/evals-all/eval/evals-rebuild through ../cli-agent-evals/bin/cli-evals.js
• replace the old evals/run.mjs harness with a migration stub
• document direct CLI usage plus Claude/Codex/opencode/Copilot plugin setup

Validation

• node ../cli-agent-evals/bin/cli-evals.js list --suite ./cli-agent-evals.config.mjs
• node ../cli-agent-evals/bin/cli-evals.js rebuild --suite ./cli-agent-evals.config.mjs --report evals/reports/latest.json
• pnpm run lint
• live canary via cli-evals: 4/5 passed; EV-013 timed out at HITL gate and is recorded in evals/reports/cli-evals-live-canary-2026-06-27-rerun.json

Dependency

• expects [codex] add unified CLI agent eval toolkit cli-agent-evals#1 to land first.

[kreneskyp]

CI is green. Merge is currently blocked only by required review (reviewDecision: REVIEW_REQUIRED).