Codex 0.159.2 passed the scripted inventory: add it to qualified-builds.json

[github-actions]

The Codex catalog check found Codex 0.159.2 on npm. qualified-builds.json does not list it, so xcb parks it and keeps running the pinned build.

• Package: codex-0.159.2-darwin-arm64.tgz, registry integrity checked
• Binary SHA-256: 16593cc2f422d5f398a8e40f550ebbaf1245392528957be342c295920a300704
• Inventory: passed 18 cases, evidence inventory.json SHA-256 f7fbfe99a007c1c27bcbafcfdc56256f9f2388ae1afbf6e86c6f29416b7a6a2b
• Run: https://github.com/hraness/xcb/actions/runs/36720738050, evidence artifact codex-inventory-0.159.2-1 (kept 30 days)

Next step

Open a pull request that adds this entry at the top of the codex list in qualified-builds.json, and enable auto-merge. In the same pull request, commit inventory.json from the artifact as qualification/codex-0.159.2-inventory.json so the evidence outlives the artifact.

{
  "version": "0.159.2",
  "sha256": "16593cc2f422d5f398a8e40f550ebbaf1245392528957be342c295920a300704",
  "platform": "darwin-aarch64",
  "qualifiedBy": "codex-catalog-run-36720738050"
}

This workflow does not open the pull request: GitHub Actions cannot create pull requests in this repository, and a pull request opened with GITHUB_TOKEN would not run the Required check.

[github-actions]

Superseded by #369: Codex 0.159.3 is the current npm release.