Harden Codex plugin preflight and project memory

[pacphi]

Summary

• make Codex plugin inspection validate portable skill frontmatter and warn on the version-bounded security-guidance Stop-output incompatibility
• document and enforce that agentic-kit never installs or enables Codex plugins
• pin Ruflo project memory across Claude, Codex, and OpenCode while preserving the native agentdb-memory.db writer
• migrate only agentic-kit-owned legacy Codex MCP registrations; preserve user-owned entries

Root causes addressed

• Codex owns its plugin tables/cache, so setup and sync must remain read-only on that surface
• hook-document validation alone missed invalid SKILL.md metadata and runtime-output advisories
• Codex and OpenCode Ruflo processes could rely on inherited cwd instead of an explicit project-memory launch contract

Validation

• pnpm run check
• full local suite: 2,004 tests plus statusline/dashboard/admin suites
• GitHub matrix passes Node 22/24/26 on Ubuntu, macOS, and Windows
• quality, internal links, and maintainer devcontainer checks pass

Notes

The .swarm/memory.db and .swarm/agentdb-memory.db pair is intentional: the first is the compatibility pin and the native bridge may use the sibling as its active writer.