deploy: add sponsor:openai tag (Best Use of Codex) + Codex-hardened build

16dc556

Running