Prefer installed Codex without a numeric version gate and use a selected host CLI when the dependency is absent. Preserve executable validation, narrow sandbox resource grants, and explicit or recorded execution choices.
Co-Authored-By: Paperclip <noreply@paperclip.ing>