fix(codex): restore source-plugin startup and session evidence

[liuhedev]

Codex source-plugin installs can fail before collecting evidence because the configured-assets registry eagerly loads DSH's YAML dependency. Bounded reviews also omit resumed sessions that started before --since, and desktop page/browser context can become a shared task request across unrelated sessions.

This change loads DSH only when selected and gives an actionable missing-YAML error, discovers Codex rollouts with activity inside the requested window, excludes host UI context from task requests, and includes Codex exec wrapper calls as observed activity. Wrapper activity does not imply nested-command success, validated changes, or release approval.

The review fix separates context classification from privacy sanitization. A real image-only request retains its task boundary even when its privacy-safe summary is empty, so subsequent edits are not assigned to the preceding text request. Both Markdown and XML image representations are covered; image content remains omitted from summaries.

Validation on Node 24.13.0 / macOS:

• 590 tests passed across 33 files, with no skips: all session tests, agent-customize including DSH inventory and provider architecture, root CLI, source-plugin isolation, and doc-link integrity. Fresh JUnit output was verified against the actual test execution.
• Anonymous regressions reproduced the original failures before their corresponding fixes. The image-only request regression also failed before the review fix and passed afterward, proving two episodes and correct edit attribution.
• An affected local-session replay recovered one session / 681 in-window events and a candidate with 53 observed wrapper calls. The composed evidence bundle returned complete, with all three lanes available. This is the original implementation's replay evidence; the review fix was verified with anonymous fixtures. No private session payloads or identifiers are included here.
• Independent review found CR-001; an independent L1 recheck of the fix and adjacent callers closed it with no new blocking or must-fix findings. The reviewer separately reran all four evidence-window tests successfully.
• git diff --check passed; the documentation routing graph was regenerated without changes.

Limits: native Windows/Linux CI and full repository checks have not run. Older matching rollouts require a read-only activity probe, stopping at the first eligible event. Existing dependency versions and YAML parsing are unchanged; this PR does not change deployment or release-waiver policy.

[liuhedev]

Review summary

本地审查结论：未发现阻塞性代码问题，可以进入合并准备。

已验证

• PR 新增回归测试：2 个文件、4 tests passed。
• git diff --check passed。
• PR 改动范围：6 files，190 additions / 11 deletions。
• 全量测试对比：PR 与 main 基线均为 10 个失败测试文件、78 个失败测试；失败集合一致，未发现本 PR 新增的全量失败。
• PR 新增覆盖了：DSH YAML 依赖按 provider 隔离、跨日 Codex session 活动发现、host UI context 排除、exec wrapper 活动识别。

合并前阻塞

1. PR 当前仍是 Draft，需要标记为 Ready for review。
2. GitHub 当前没有可见的远端 CI 结果，需要 Ready 后触发并等待必需检查。
3. 基线已有的 governance/reporting 失败不属于本 PR 引入，需按仓库现有 CI/维护流程单独处理或明确豁免。

没有提交代码修改，也没有发现需要 request changes 的问题。

[phodal]

已完成代码审查、问题修复与合并前核验，目标提交为 0dcd238。

独立审查发现一项 P2：原生 input_image 附件与页面/浏览器上下文共存时，真实用户请求被误判为上下文，后续修改会归入前一任务。已在 0dcd238 修复，原始消息层保留图片请求边界及 userPrompt，不复制图片数据；新增四个场景、各三种文本输出模式，确认修复前失败、修复后通过。

验证：

• 聚焦测试 4 文件、33 测试通过。
• 本地 macOS / Node 24.18.0 全量根测试：1782 通过、7 项条件跳过、0 失败。
• 文档链接、路由图一致性与 git diff --check 通过。
• 最新提交的全部 7 项远端检查通过：四组 CI 测试矩阵，以及 Windows/macOS/Linux 桌面构建、原生测试和打包 smoke。
• 对应 spec：docs/specs/2026-10-12-codex-source-plugin-session-evidence.md，记录 AC-1 至 AC-5 与验证边界。

未遗留已确认的阻塞问题，可以 squash 合并。本次没有修改依赖、发布策略或无关工作流。