Version-independent Codex instruction deployment with dry-run, backups, hook isolation, and recovery.