Upgrade gh-aw and fix Codex runtime compatibility and usage reporting

[chrizbo]

ABC's mixed gh-aw runtimes included a retired gpt-5-codex model, and Workflow Health missed the new runtime's usage artifacts while assigning unknown models an unrelated price. Upgrade all 27 workflows to gh-aw v0.89.21 / Codex CLI 0.154.0 and replace the eight retired model pins with the smoke-tested gpt-5.3-codex.

Preserve shell-dependent prompts through explicit shell declarations, retain gh-proxy and existing security/output boundaries, fix custom-output step timeouts and Intake conclusion concurrency, and synchronize setup tooling, action pins, and upstream skills. The health collector now reads agent/detection usage artifacts, preserves provider identity, and reports unavailable or partial pricing honestly. Add configuration, evaluation, billing, and runtime-test documentation.

Validation:

• Strict compilation: all 27 workflows, zero warnings.
• 14 collector regression tests and 18 mocked Slack/calendar handler tests pass.
• Skill synchronization and whitespace checks pass.
• Five staged live runs passed: Weekly Status, Workflow Health, Strategy Alignment, and two concurrent Intake requests. Run links and limits are recorded in docs/codex-workflows.md.
• Collector verified against real Weekly Status and Workflow Health usage artifacts.

The isolated smoke branch is excluded. Production locks are not staged. These tests cover representative runtime execution and staged output plumbing; they do not establish quality across all prompts or exercise actual external publication. The pinned release was the latest verified on September 24, 2026.