Fixed
- Preserve harness subcommands and command-line arguments, including Pi subcommands/options and Codex invocations.
- Keep the bundled Pi profile-status extension additive and machine-local.
- Tolerate Codex's generated
codex/tmpscratch links without weakening rejection of tracked or remote runtime paths.