bug(prompt-input): the prompt-input profile refuses every Codex after 0.149.1 (unsupported-cli at 0.157.1) #63

Found by review C of #58 (Codex 0.157.1 acceptance). Blocks accepting 0.157.1.

src/transcript/prompt-input/CodexPromptInputProfile.ts:229 finishes with {ok:false, reason:'unsupported-cli'} unless the app-server probe's userAgent version is exactly 0.149.1.

At 0.157.1 (the version Agent Code runs daily), prepareCodex01491PromptInputProfile is therefore refused, CodexHeadless gets no profile, PromptInputEvidence.consume returns [], registerPrompt never fires, and decideFreshRolloutClaim holds forever on "no local submitted prompt recorded". Fresh-rollout ownership then survives only through the proxy identity path (x-codex-window-id → session_meta), and ResponsesProxy is nullable in the app (codexSession.ts:221).

The pin is deliberate and tested (CodexPromptInputProfile.test.ts:74, the wrong-version case). The fix is a verified 0.157.x profile: the key-submission semantics recorded against the 0.157.1 binary (testing/record-live-prompt-input.mts), not simply widening the version check.