fix(config): harden doctor checks and enable Codex full access

scripts/tests/test-command-summaries.sh

@@ -8,6 +8,22 @@ while [ $# -gt 0 ]; do
   esac
 done
 root=$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/../.." && pwd)
+(
+  codex() { printf 'fixture warning\n' >&2; printf 'fixture 1.0\n'; return "$DOCTOR_TEST_CODE"; }
+  export -f codex
+  for DOCTOR_TEST_CODE in 0 7; do
+    export DOCTOR_TEST_CODE
+    if probe_output=$(bash "$root/scripts/commands/doctor.sh" --summary); then probe_status=0; else probe_status=$?; fi
+    if [ "$DOCTOR_TEST_CODE" -eq 0 ]; then
+      test "$probe_status" -eq 0
+      printf '%s\n' "$probe_output" | grep -Eq '^Doctor: PASS \| [0-9]+ checks$'
+    else
+      test "$probe_status" -eq 1
+      printf '%s\n' "$probe_output" | grep -Fq 'FAIL codex --version failed (exit 7): fixture warning'
+      printf '%s\n' "$probe_output" | grep -Eq '^Doctor: FAIL \| [0-9]+ checks$'
+    fi
+  done
+)
 doctor_summary_output=$(bash "$root/scripts/commands/doctor.sh" --summary)
 if printf '%s\n' "$doctor_summary_output" | grep -q '^PASS '; then
   printf 'Doctor summary mode must not print individual PASS lines.\n' >&2