Complete procedures with a way back.

Combine codex exec, the TypeScript Codex SDK, and openai/codex-action@v1 into bounded maintenance workflows with read-only defaults, scoped credentials, structured artifacts, explicit write jobs, human review gates, and resumable failure handling.