Accounts for Codex 0.2.5

Adds support for Sub2API OAuth exports that contain only an access token, including nested profile identity data.

• macOS builds are Developer ID signed and notarized.
• Windows installers are unsigned and passed CI smoke tests.