[codex] fix(cli): allow dash-leading positional adapter args

[Yinchaochen]

Summary

• allow dynamic adapter commands with positional args to accept dash-leading values
• add a regression test for opencli boss detail -123456abdc -f json

Root Cause

Commander treated values like -123456abdc as unknown options before OpenCLI's adapter argument preparation ran, so commands with positional IDs could fail before adapter-level validation had a chance to handle them.

Impact

Commands such as opencli boss detail -123456abdc -f json now parse the positional security-id correctly instead of failing with unknown option.

Validation

• npm run typecheck
• npm test -- --runInBand src/commanderAdapter.test.ts
• npm run build
• npm test (fails on this Windows environment due pre-existing unrelated symlink/path separator assertions in src/plugin.test.ts, src/engine.test.ts, and several adapter download/upload tests)

Fixes #1160