Redesign Codex upstream Radar automation

[yvette-carlisle]

Summary

• Replace the old latest-signal sync with a deterministic upstream Radar review queue for openai/codex commits and PR evidence.
• Add upstream_review_queue/v1, upstream_review/v1, and social_post/v1 contracts, validators, docs, and skills.
• Split deterministic GitHub Actions from AI-owned Codex automations: Actions refresh queue/release metadata; automations perform careful AI analysis and publishing decisions.
• Replace the old X draft flow with an automated, low-frequency @decodexspace Publisher policy controlled by @hackink, generated image templates, and an 8-post daily cap.
• Change raw Radar artifact retention to a 21-day hot window before GitHub Release archiving.

Automation setup

Current Codex automations are configured and all are PAUSED:

• codex-upstream-radar-review: every 6 hours, consumes the review queue and writes validated upstream reviews for features, deprecations, protocol changes, breaking changes, Decodex compatibility, and community value.
• codex-release-checkpoint-publisher: every hour, evaluates new release and prerelease checkpoints and may publish a source-backed release rollup through the Publisher path.
• decodex-x-publisher: every 6 hours, publishes low-frequency English X posts through Chrome as @decodexspace when evidence and daily cap allow it; blocked cap records are preserved for later analysis.
• codex-rate-limit-reset-watch: every 6 hours, AI-judges @thsottiaux reset-related posts.
• decodex-radar-artifact-archive: daily, archives raw Radar artifacts older than the 21-day hot window.

Old paused draft automations were deleted:

• codex-release-rollup-draft
• decodex-x-draft-publisher

Validation

• python3 -m py_compile scripts/github/*.py
• python3 scripts/github/test_social_post_contract.py && python3 scripts/github/validate_social_post.py artifacts/social/x && python3 scripts/github/validate_upstream_review.py artifacts/github/review-queue artifacts/github/reviews
• Workflow YAML parse over .github/workflows/*.yml
• python3 /Users/x/.codex/plugins/cache/hack-ink/playbook/0.3.0/scripts/semantic_drift_audit.py plus manual reverse-check of old X draft terms
• cargo make decodex-checks
• git diff --check
• cargo make check
• Verified latest commit is GPG signed.