v6.22.0

Auto-released from merge of PR #1817 (trigger: push).

• ChatGPT seats are shared across replicas with --pool-shared-accounts. A Codex account stayed on the replica that completed its login, so behind a load balancer it served from one pod and the others listed no seats (#1733). Seats now sync through a registry of their own on the lock service, under the same rules as Claude accounts: the newer login wins, then the later expiry, and a removal reaches every replica. dario codex remove publishes the removal first. Under --no-claude-auth the seats sync on their own. Usage readings and cool-downs stay per instance. This puts ChatGPT refresh tokens on the lock service for anyone already running the switch, so guard it as the accounts directory. Replicas holding different subscriptions under one alias keep only the newer login, as Claude accounts do, so give them different aliases before upgrading: seats were per replica until now, and altman-1 is the default on each. Rebuild the Redis image or redeploy the Worker for the /codex-accounts/* endpoints; on an older service the seats stay per instance.

---

Built + tested + npm-published inline by cc-drift-auto-release.yml on this run — tokenless via OIDC trusted publishing, provenance-attested. See the workflow log for the publish output.