Promote dev-only commits from dev onto main

[NagyVikt]

Summary

• merge the 5 commits that exist on dev but not on main
• keep main as the final/default branch by promoting those existing dev commits through a real merge commit
• sync dev back to main after this merges so the branches stop diverging

Dev-only commits

• 5b2238f Let codex-agent finish local-origin test lanes safely (Let codex-agent finish local-origin test lanes safely #236)
• f005d57 Enforce OpenSpec bootstrap defaults without sandbox helper drift (Enforce OpenSpec bootstrap defaults without sandbox helper drift #129)
• e16fbe5 Prevent Codex agent commits from primary checkout on agent/* branches (Prevent Codex agent commits from primary checkout on agent/* branches #126)
• 7db2b62 Capture OpenSpec plan workspace so branch finish can publish and merge to dev (Capture OpenSpec plan workspace so branch finish can publish and merge to dev #111)
• 0f55dc7 Advance guardex to 5.0.13 for the next publish slot (Advance guardex to 5.0.13 for the next publish slot #110)

Notes

• This PR intentionally uses dev as the source branch so the existing dev commits become part of main history.
• After merge, dev should be fast-forwarded to main.