Merge origin/dev and apply fail-closed update recovery (policy A)

Merge dev (768 commits, v2.10.0 line) into the update-recovery branch and
finish the two remaining review items on top of it:

- Log sanitizer now redacts space-containing profile paths: anchor-based
  matching redacts through spaced Windows/POSIX profiles up to the npm/cache
  anchors (.npm, _cacache, _npx, .opencodex-, ocx.mjs) instead of stopping
  at the first space (Wibias reproduction: 'C:\Users\Alice Smith\.npm\...'
  previously leaked whole).
- Policy A (maintainer decision, Wibias recommendation): a failed GUI npm
  installer no longer triggers automatic proxy recovery. The failed
  installer may still be mutating the global package tree, so the update
  job stays failed and the log names the manual path ('ocx service
  install' or 'ocx start --port N'). Observation steps (healthy probe,
  pre-update PID identity, replacement detection) are kept; the launcher
  discovery/restart machinery and recovery-tree-scan worker are removed.
- dev's hardened restart/service path is taken wholesale; branch-side
  preflight, sanitizer, fail-closed recovery, and liveness capture are
  re-applied on top.
- docs-site lifecycle reference (en/ja/ko/ru/zh-cn) documents the npm
  cache pre-flight and the fail-closed manual recovery path.

Supersedes #533; original work by @WZBbiao (imported commits preserve the
wzb author identity, which GitHub does not link).

Author: lidge-jun

.codexclaw/goalplans/opencodex-4-pabcd-work-phase-wp1-wp2-dev2-go-pr/goalplan.json

@@ -0,0 +1,26 @@
+# GitHub automation instructions
+
+This file applies to `.github/` and inherits the repository-wide rules in `/AGENTS.md`.
+
+## Security boundary
+
+Every workflow, ownership, branch-enforcement, release, or repository-automation
+change requires explicit security review under `MAINTAINERS.md`.
+
+## Workflow rules
+
+- Grant the minimum required `permissions`.
+- Pin third-party actions to immutable full commit SHAs.
+- Preserve the human-readable version comment beside each pinned action.
+- Do not run untrusted pull-request code with secrets or write permissions.
+- Treat `pull_request_target`, workflow dispatch, reusable workflows, artifacts, caches, and generated command input as trust boundaries.
+- Do not broaden triggers, write permissions, token exposure, release eligibility, or publish capability without an explicit task requirement.
+- Preserve cross-platform coverage where the workflow currently promises Linux, macOS, and Windows behavior.
+- Keep branch-enforcement text synchronized with `AGENTS.md`, `MAINTAINERS.md`, and the public contributing guide.
+
+## Validation
+
+- Inspect the complete workflow diff, including event triggers, permissions, conditions, interpolation, and shell behavior.
+- Run the local commands represented by changed workflow steps where possible.
+- Run `bun run prepush` for CI, release, dependency, packaging, or cross-platform workflow changes.
+- Do not claim the workflow itself passed until GitHub Actions reports success for the exact commit.

.codexclaw/goalplans/opencodex-4-pabcd-work-phase-wp1-wp2-dev2-go-pr/ledger.jsonl

@@ -14,5 +14,7 @@
 /src/server/management-api.ts @lidge-jun @Ingwannu
 
 # Governance and security policy
+/AGENTS.md @lidge-jun @Ingwannu
+**/AGENTS.md @lidge-jun @Ingwannu
 /MAINTAINERS.md @lidge-jun @Ingwannu
 /SECURITY.md @lidge-jun @Ingwannu

.codexclaw/goalplans/opencodex-live-unfinished-issues-and-prs-triage/goalplan.json

@@ -35,8 +35,12 @@ body:
         - Dashboard
         - Provider adapter
         - Authentication and account pool
+        - Catalog / models
+        - Streaming
+        - Tools / MCP / web search
         - Installation or packaging
         - Service lifecycle
+        - Platform (Windows / macOS / Linux)
         - Documentation
         - Other
     validations:

.codexclaw/goalplans/opencodex-live-unfinished-issues-and-prs-triage/ledger.jsonl

@@ -1,5 +1,8 @@
 blank_issues_enabled: false
 contact_links:
+  - name: Report a security vulnerability (private)
+    url: https://github.com/lidge-jun/opencodex/security/advisories/new
+    about: Report undisclosed vulnerabilities privately to the maintainers. Do not open a public issue.
   - name: Security policy
     url: https://github.com/lidge-jun/opencodex/blob/main/SECURITY.md
     about: Read the supported-version and reporting guidance before sharing security-sensitive details.

.github/AGENTS.md

@@ -19,8 +19,12 @@ body:
         - Dashboard
         - Provider adapters
         - Authentication and account pool
+        - Catalog / models
+        - Streaming
+        - Tools / MCP / web search
         - Installation or packaging
         - Service lifecycle
+        - Platform (Windows / macOS / Linux)
         - Documentation
         - Multiple areas
         - Other

.github/CODEOWNERS

@@ -2,6 +2,7 @@ name: Provider or API compatibility
 description: Report an incompatible provider, endpoint, request shape, response shape, or client integration.
 labels:
   - provider-compatibility
+  - provider
 body:
   - type: markdown
     attributes: