v0.82.0

Added

• Codex worker lane: the production execution and advice adapter, still dark (#1220, #1171, #1106).
  Behind the scenes and not user-visible yet: connects the Codex credential, harness-boundary and image-packaging groundwork from 0.79.0 and 0.80.0 into a complete Codex run and advice adapter. Worker-owned callbacks, not Codex-native tools or hooks, own shell, file and patch edits, skills, workflow signals and delegation; an immutable per-run registry and a matching-epoch safety permit guard every durability and publication sink; provider roots are OS-isolated so credentials are inaccessible rather than merely absent from the environment; and subscription refresh runs through the API-owned coordination flow. Public Codex routing stays disabled, so saving a Codex credential still cannot create a Codex run through any of today's paths, and the Claude worker path is preserved unchanged.