feat(codex): add standalone OpenGUI Android plugin

[HarveySang]

Summary

Add a standalone OpenGUI plugin for local Codex on macOS arm64/x64. The plugin provides screenshot-guided Android actions, a read-only multi-device wall, and an independently packaged CLI/daemon without modifying the production DSH plugin or the WorkBuddy connector.

• Bundle the Codex Skill, macOS ADB and a checksum-pinned first-use Node launcher; maintain separate dependencies, archives and CI/release workflows.
• Bind sessions to the host-provided Codex task identity, scope wall tokens to individual sessions, and retain device identities across reconnection.
• Consume observation credentials before dispatch so a failed action cannot reuse stale coordinates. Include bounded actions, cancellation, idle expiry, screenshot cleanup and native confirmation for classified consequential actions.
• Keep release creation draft-only, with real-device acceptance and public-directory submission documented as separate gates.

Validation

• pnpm check: 63 tests passed; TypeScript build and staged package validation passed.
• pnpm package: tar.gz and ZIP generated; SHA-256 sidecars verified.
• Browser verification with a simulated phone: the device-wall image decoded successfully at 100 × 200 pixels.
• Regression coverage includes cross-task access/cancellation, cross-session wall tokens, failed-action observation reuse and device reconnection.
• Source whitespace check passed excluding the unmodified upstream Android NOTICE file.

Boundaries

No production DSH files, root marketplace entries or WorkBuddy files are changed. This is a candidate integration: physical-device acceptance, installation into a normal Codex profile and public publication remain unverified. Task identity prevents accidental cross-task access; it is not a security boundary against malicious processes running as the same OS user. Protocol 2 requires an older daemon to finish its sessions and exit before upgrade.