feat(codex): update placemat for Codex CLI v0.159.3

[dommango]

What this changes

Bumps the Codex CLI placemat's "As of release" tag from v0.159.2 to v0.159.3. The release (per its GitHub release notes) adds "optional reminders to complete account security setup" for eligible local sessions signed in with ChatGPT — no new slash command, CLI flag, config key, or hook event is documented for this, so there's no placemat content to add. No changelog entry per AGENTS.md's slack rule; the release tag is now 3 versions ahead of the newest changelog entry (v0.159.0, 2026-09-29), the maximum allowed.

Also re-checked all 7 existing unverified items against freshly fetched vendor docs this run — none were promotable:

• /tui, /daemon — still absent from developer-commands.md's raw slash-token scan
• instant_interrupt — still absent from config-reference.md
• ~/.codex/prompts, ~/.codex/rules — still undocumented in cli-customization.md
• mcp_oauth_callback_port/mcp_oauth_callback_url, mcp_optional_startup_grace_ms — intentionally kept unverified per the card-hooks inventory-gate workaround (confirmed settings, not hook events)

Type

• Content correction (wrong/outdated/missing entry)
• Bug fix (broken layout, link, behavior)
• Design / CSS / accessibility
• Style guide or structural change
• New agent placemat
• Docs (README / AGENTS.md / CONTRIBUTING)
• CI / tooling

Checklist

• I read AGENTS.md's Style Guide and Content Rules
• node tests/placemat.test.js codex passes locally (54 passed, 0 failed)
• node scripts/build-changes.js --all --check passes locally (generated files are fresh)
• No versions/*.html files were edited
• No hand-edited changes.json or feed.xml
• Every new/changed row is sourced from Codex's own vendor docs/release notes — none added this run
• N/A — no new rows added this run
• N/A — no new rows added this run
• Only codex/ is touched

Source

• https://github.com/openai/codex/releases/tag/rust-v0.159.3
• https://github.com/openai/codex/releases.atom (fallback; api.github.com is gated in the routine sandbox)
• https://github.com/openai/codex/releases (fallback, confirms Latest/Pre-release status)
• https://registry.npmjs.org/@openai/codex (cross-check, dist-tags.latest = 0.159.3)
• https://learn.chatgpt.com/docs/developer-commands?surface=cli, config-file/config-reference, cli-customization (unverified re-check)

🤖 Generated with Claude Code

https://claude.ai/code/session_01WSCKuh8MhaFp1rZ9w9zUPA

---

Generated by Claude Code

[dommango]

Merge-gate code review (independent of the pipeline's Step 8 self-review)

Verdict: clean — no CRITICAL/HIGH findings.

• Confirmed independently against the v0.159.3 GitHub release notes: the only documented change is a ChatGPT-sign-in account-security-setup reminder, with no CLI flag, slash command, config key, hook, or MCP surface — so no placemat content entry is correct per AGENTS.md's "nothing placemat-relevant" rule.
• Diff is the expected 2-line .release-tag / .print-head bump (v0.159.2 → v0.159.3), kept in sync.
• Per-page parity holds: footer "Content synced 2026-09-29" still matches the newest changelog entry's date (v0.159.0); release tag is exactly 3 versions ahead of that entry, within AGENTS.md's limit.
• node scripts/build-changes.js --all --check passes (generated files fresh); node tests/placemat.test.js codex passes (54/54).
• No other agent directory touched; no versions/*.html or hand-edited generated files; commit/branch naming follows convention.

No CRITICAL/HIGH findings → proceeding to merge once CI is green, per codex/PIPELINE.md Step 10.

---

Generated by Claude Code