fix(orchestration): honor configured Codex runner - #50

Summary

• route strong orchestration workers through the configured default runner profile instead of the hard-coded claude-code identity
• add a provider-neutral structured invocation contract implemented by the Codex CLI and Claude Code adapters
• thread the shared runner registry through task and objective roles, including builders, evaluators, aggregation, and integration reconciliation
• retain bounded malformed-output diagnostics and add real fake-Codex process coverage for the PLANNER path
• rebuild the GitHub Action, Claude plugin, and Codex plugin runtime bundles

Validation

• pnpm typecheck
• pnpm lint
• 89 focused runner/routing tests
• 56 driver/objective integration tests (55 passed, 1 platform skip), followed by a clean 9/9 driver rerun after updating the legacy worker-id assertion
• pnpm build:plugin
• node scripts/verify-codex-plugin-bundle.mjs (16/16)
• node scripts/validate-examples.mjs (26/26)

Operational effect

A project with defaultRunner: "codex-default" now advertises and dispatches codex-default for PLANNER and all other strong orchestration roles. Existing failed attempts recorded under the legacy claude-code worker identity no longer poison the Codex worker's retry count when the blocked job resumes.