Add Codex desktop app mode

[stephenleo]

Summary

• add a no-PTY vibesense codex-app mode backed by openmicro/harness
• keep VibeSense ownership of games, controller routing, pause policy, SSE, auto-play, and the 750 ms input guard
• route verified desktop actions through OpenMicro and use shared Codex hook state
• document macOS permissions, hook trust, shortcuts, and shared-host behavior

Verification

• npm run verify (97 tests)
• npm run build
• git diff --check
• independent Standards review: no findings
• independent Spec review: no findings

Hardware

Codex.app is installed, but openmicro doctor found no connected controller, so real controller/app smoke testing was unavailable.