fix(deps): require openai-codex>=0.1.0b3 so the codex extra installs on glibc Linux

openai-codex 0.1.0b2 pins openai-codex-cli-bin 0.132.0, which ships no
manylinux wheels and made 'uv sync --all-extras' fail on ubuntu CI runners.
b3 pins 0.137.0a4 (full wheel matrix). Add uv required-environments for
macOS arm64 + Linux x86_64 so resolution can never regress to a version
missing those platforms, and a per-package pre-release constraint marker
for the pinned CLI binary.

Author: ebarti

pyproject.toml

@@ -25,12 +25,14 @@ dependencies = []
 
 [project.optional-dependencies]
 claude = ["claude-agent-sdk>=0.2.87"]
-codex = ["openai-codex>=0.1.0b2"]
+# 0.1.0b3 floor: earlier betas pin a codex binary with no manylinux wheels,
+# making the extra uninstallable on glibc Linux.
+codex = ["openai-codex>=0.1.0b3"]
 antigravity = ["google-antigravity>=0.1.2"]
 all = [
     "claude-agent-sdk>=0.2.87",
     "google-antigravity>=0.1.2",
-    "openai-codex>=0.1.0b2",
+    "openai-codex>=0.1.0b3",
 ]
 
 [project.urls]
@@ -47,6 +49,17 @@ dev = [
     "ruff>=0.8",
 ]
 
+[tool.uv]
+# openai-codex-cli-bin ships per-platform binary wheels; require the platforms we
+# develop and run CI on so resolution never locks a version missing one of them.
+required-environments = [
+    "sys_platform == 'darwin' and platform_machine == 'arm64'",
+    "sys_platform == 'linux' and platform_machine == 'x86_64'",
+]
+# openai-codex pins exact pre-release builds of its CLI binary; the pre-release
+# marker here opts that one package into pre-release resolution.
+constraint-dependencies = ["openai-codex-cli-bin>=0.134.0a1"]
+
 [tool.hatch.build.targets.wheel]
 packages = ["src/agent_runtime_kit"]