Bound provider note output and context

[itsjling]

Summary

• enforce exact schema and runtime size limits for provider notes
• send only bounded title, what, and risks fields from earlier notes
• keep prior-note context within 250,000 bytes and each full request within 2,000,000 bytes
• add exact-boundary and hostile-context tests

Verification

• corepack pnpm run check
• corepack pnpm run fallow:audit

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 8a56212f72

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".