chore(deps): update Codex CLI and SDK to 0.162.0-alpha.14

[dependabot]

Summary

Update the Codex CLI and SDK from 0.162.0-alpha.12 to 0.162.0-alpha.14 across the SDK, MCP application, and evaluation harness.

Changes

• Keep direct dependencies, evaluation overrides, transitive references, and all six native platform aliases on the same version.
• Review the upstream native changes and verify published package integrity. The SDK JavaScript/types and CLI launcher are unchanged; their package metadata points to the new native release.
• No public commands, flags, environment variables, or defaults change in this wrapper.

Testing

• Frozen SDK and MCP dependency installations: passed.
• SDK and MCP type checks, SDK formatting, and CI script build: passed.
• Plugin Ruff lint/format and both portable source compatibility commands: passed (9 compatibility tests).
• Deep Scan executor tests covering discovery, reduction, resume, inherited settings, and concurrent scans: passed.
• Production dependency audit: no known vulnerabilities found.
• Existing CI: 50 successful checks, including cross-platform SDK tests, installed-package checks, plugin tests, and container validation. CodeQL is neutral because expected analysis configurations are absent; no CodeQL result is claimed.
• An additional full local SDK run was interrupted after filesystem sandbox ownership checks affected credential-path fixtures. Full SDK coverage passed in CI.

Risk and rollout

The upstream native executable changes while the published SDK interface stays unchanged. Existing prerelease pins remain exact and coordinated. No migration is required. Live model scans were not run.

Public disclosure review

• No customer, partner, prospect, or user identities, data, or identifying details are included.
• No credentials, personal data, private source, scan findings, or nonpublic links or tickets are included.
• I reviewed the branch name, title, description, commits, changes, comments, logs, screenshots, attachments, and links for public disclosure.

[mldangelo-oai]

Reviewed the complete dependency diff, coordinated native platform pins, published package integrity, upstream changes, and worker/resume integration. No blocking findings. Local frozen installs in all three packages, type/format/source checks, Deep Scan executor tests, production audit, and deterministic eval/config checks passed. The targeted SDK integration suite passed: 400 tests, 28 platform skips, 0 failures across runtime, policy, comparison, prompts, review, resume, and worker recovery. Tests used a clean temporary directory and system Git after isolating workstation fixture-environment issues. Existing cross-platform CI passed; refreshed CI is completing.