[codex] Stabilize bug lanes and update development plan

[mimeding]

Summary

• Refresh the GitHub-driven development plan with current open PRs, bug reports, feature requests, execution order, and validation evidence.
• Stabilize OpenAI-compatible provider model discovery by falling back to configured manual models when /models is unavailable or schema-incompatible.
• Fix capability/tool exposure when semantic embeddings are unavailable but BM25 has an authorized capabilities_search hit.
• Add a startup timeout/report path for osaurus-evals so CI gets a bounded failure instead of a hang.
• Clarify Remote MCP provider docs versus the local osaurus mcp stdio bridge.

Validation

• Verified upstream origin/main at bb2e7f7c has green GitHub checks.
• Ran exact-main release gate: swift build --package-path Packages/OsaurusCore -c release in /private/tmp/osaurus-coord/worktrees/main-bb2e7f7c.
• Ran git diff --check in /private/tmp/osaurus-pr-clean.
• Ran swift test --package-path Packages/OsaurusEvals.
• Ran DEVELOPER_DIR=/Applications/Xcode.app/Contents/Developer swift test --package-path Packages/OsaurusCore --filter 'RemoteProviderModelDiscoveryTests|ToolSearchServiceTests|PreflightCapabilitySearchTests'.
• Ran DEVELOPER_DIR=/Applications/Xcode.app/Contents/Developer swift build --package-path Packages/OsaurusCore -c release.

References

• Refs Command-based MCP providers (stdio) do not work despite documentation #416
• Refs trying to connect to local lemonade / OpenAI compat server #615
• Refs Osaurus Search tool never seem to be found by any model #789
• Refs I cant use tools, and I've granted all permissions #823
• Refs Minimax 2.7 Not Connecting #828
• Refs Is this Program working for anyboday? #995
• Refs CapabilitySearch eval CLI hangs after build on current main #1050
• Refs [codex] Clarify MCP stdio provider docs #1058
• Refs Add remote provider model discovery fallbacks #1059

[mimeding]

Validation evidence for ready PR:

• Upstream origin/main gate was green at bb2e7f7c.
• Exact-main local release build passed in /private/tmp/osaurus-coord/worktrees/main-bb2e7f7c.
• PR branch local validation passed:
  • git diff --check
  • swift test --package-path Packages/OsaurusEvals
  • DEVELOPER_DIR=/Applications/Xcode.app/Contents/Developer swift test --package-path Packages/OsaurusCore --filter 'RemoteProviderModelDiscoveryTests|ToolSearchServiceTests|PreflightCapabilitySearchTests'
  • DEVELOPER_DIR=/Applications/Xcode.app/Contents/Developer swift build --package-path Packages/OsaurusCore -c release
• GitHub checks are green:
  • test-core
  • test-cli
  • swiftlint
  • shellcheck
  • update_release_draft

Reviewer note: gh pr edit --add-reviewer tpae failed because this token does not have RequestReviewsByLogin permission, so this comment carries the review evidence.