feat(workdays): add repeatable agent/activity selectors

[adrianwebb]

Outcome

Expose repeatable agent/activity/class planning selectors through the canonical SDK command tree.

Work authority

• Work item / Issue: Expose bounded workday agent/activity selection for real review acceptance #200; SDK #294; Platform #501.
• Proposal / decision: Operator-authorized prerequisite for SDK #293 review acceptance.
• Assignment / checkpoint: Current operator task.
• Actor: Codex desktop.
• Human authority: adrianwebb.
• Agent / capacity provider: Codex desktop; no production mutation.
• Exact base ref: staging e2fd62f
• Exact head ref: codex/targeted-workday-selection 433204e

Contributor mode (select one):

• Human-authored
• Agent-assisted under human authority
• Agent-authored under human authority

Plan

Consume SDK rc117, normalize nested selectors, reject malformed intent before requests, and preserve exact-preflight start. Deliver isolated from the other active CLI worktree.

Changes and commits

433204e adds safe nested bindings, repeated/CSV selectors, regression tests, regenerated command help/schema, and CLI rc83.

Verification

All 175 CLI tests pass; build and file-length/architecture pass. Live plan selected exactly reviewer/reviewing with a bounded 180-second reservation; exact-digest start succeeded. Actual review outcome remains tracked in Platform #501/API #344, not claimed by this PR.

Risk and rollback

Omitted selectors unchanged. Empty/malformed selectors fail before network; nested bindings reject prototype traversal and collisions. No credential store or database changes. Revert this commit to return to rc82/SDK rc116.

Completion summary

CLI implementation complete; required exact-head Actions must pass before staging merge and rc83 publication.

Submission checklist

• The change is bounded to the stated work item and target repository.
• Exact base and head refs are recorded and the branch is ready for review.
• Verification and compatibility evidence are recorded above.
• No plaintext secrets, credentials, machine state, or unrelated residue are included.
• Plan, status, commits, and completion summary form a complete durable record.
• Rollback or recovery steps are documented and executable.