Connect and smoke-test the dedicated Codex CDP renderer

[codeacme17]

Tracks #4 and #1.

Summary

Complete the production Codex-hosted path after the Host Adapter contract and DOM/security primitives land.

Scope

• Discover and connect only to an explicitly launched Codex Git dedicated profile/instance through a loopback CDP endpoint.
• Bind the dedicated-instance ownership proof, stable renderer target ID, CDP endpoint/profile, and every Page.setBypassCSP command to the same target.
• Compose the production Codex Host Adapter from the launcher and fall back to StandaloneHostAdapter on discovery, compatibility, attachment, or remount failure.
• Extract and forward typed Current Project, theme, and current task context without reading private JavaScript state.
• Observe same-renderer DOM replacement and renderer replacement, reattaching idempotently with a fresh frame generation.
• Surface a typed degraded/standalone-required transition if a previously attached renderer becomes unavailable, becomes incompatible, or cannot reacquire its CSP lease.
• Run and record the exact-version manual smoke matrix against a disposable dedicated Codex profile.

Acceptance criteria

• Normal user-owned Codex windows are never attached to and never receive CSP bypass commands.
• A dedicated Codex Git instance can be discovered, ownership-verified, attached, and detached without affecting unrelated renderer targets.
• Renderer and same-renderer DOM replacement either remount successfully or produce an explicit standalone-required transition.
• CSP bypass is reference-counted, retryable after a failed disable, and restored when the final lease closes.
• Automated tests cover discovery rejection, ownership mismatch, target replacement, DOM replacement, CSP reacquisition failure, and fallback.
• The compatibility document records the verified Codex Desktop version and completed manual smoke results.

Dependency

Depends on the Host Adapter contract and DOM/security foundation split from #4.

Out of scope

Git state and commands, attaching to normal user-owned Codex windows, reading private JavaScript state, packaging, and distribution.