Lessons
From the last year
Codex CLI: ~/.codex/ state persists after uninstall, --with-api-key requires stdin, and plaintext tokens lack secure store option
bash codex-cli openai authentication api-keys 685 tokens
Atomic symlink-swap deploys with Sentry error and cron reporting via pure bash
deployment sentry bash nginx cron 485 tokens