test: add direct codex test workflow

[stranske]

Test workflow to debug why reusable workflow calls aren't creating jobs.

This is a minimal workflow with workflow_dispatch trigger to test the reusable-codex-run.yml directly.

[agents-workflows-bot]

⚠️ Action Required: Unable to determine source issue for PR #108. The PR title, branch name, or body must contain the issue number (e.g. #123, branch: issue-123, or the hidden marker ).

[github-actions]

Automated Status Summary

Head SHA: a02cc34
Latest Runs: ⏳ pending — Gate
Required contexts: Gate / gate, Health 45 Agents Guard / Enforce agents workflow protections
Required: core tests (3.11): ⏳ pending, core tests (3.12): ⏳ pending, docker smoke: ⏳ pending, gate: ⏳ pending

Workflow / Job	Result	Logs
(no jobs reported)	⏳ pending	—

Coverage Overview

• Coverage history entries: 0

Updated automatically; will refresh on subsequent CI/Docker completions.

---

Keepalive checklist

Scope

No scope information available

Tasks

• No tasks defined

Acceptance criteria

• No acceptance criteria defined

[github-actions]

Keepalive loop status for PR #108

• Action: wait (missing-agent-label)
• Gate conclusion: failure
• Tasks: 0/0 complete
• Iteration: 0/5
• Keepalive enabled: no
• Autofix enabled: no

[Copilot]

Pull request overview

This PR adds a test workflow to diagnose issues with reusable workflow calls not creating jobs. It provides a minimal, manually-triggerable workflow that directly calls the reusable-codex-run.yml workflow.

• Adds a new workflow_dispatch-triggered workflow for testing the Codex reusable workflow
• Implements a preflight job to check secret availability before execution
• Includes a summary job to report results of the test run

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The preflight job always sets secrets_ok=true regardless of whether the secrets are actually present. This means the test-codex job will always run even if the required secrets are missing, which may not provide useful test results. Consider adding conditional logic similar to the production workflow to only set secrets_ok=true when at least one of the required secrets is present, or document that this is intentional for testing purposes.

Suggested change

	echo "secrets_ok=true" >> "$GITHUB_OUTPUT"
	if [ "$HAS_CODEX_AUTH" = "true" ] || [ "$HAS_APP_ID" = "true" ]; then
	echo "secrets_ok=true" >> "$GITHUB_OUTPUT"
	else
	echo "secrets_ok=false" >> "$GITHUB_OUTPUT"
	fi

[stranske]

Abandoning this test workflow approach. Found the root cause: PR #107 added a preflight dependency to run-codex which caused GitHub Actions to not create the reusable workflow job. See PR #109 for the fix.