[self-care:open-source-failures] Investigate shared Codex CLI execution failures in github/gh-aw

`github/gh-aw` has two separate workflows failing at the `Execute Codex CLI` step in the bounded snapshot, which indicates a likely shared runtime or invocation problem rather than a one-off content failure. The available evidence does not expose stderr, so the exact root cause still needs confirmation, but the shared failing step makes this the highest-return next investigation outside the authority outage.

**Action:** The `github/gh-aw` maintainers should inspect the Codex CLI invocation path and repair the shared execution preconditions; accept when both affected workflows complete the CLI step successfully in a fresh run.

Agent prompt
Review the workflows `.github/workflows/daily-regulatory.lock.yml` and `.github/workflows/audit-workflows.lock.yml` in `github/gh-aw` and trace the shared `Execute Codex CLI` setup. Identify the smallest common fix for environment setup, credentials, binary availability, or invocation arguments, then validate that both workflows pass the CLI execution step.

- Severity: P0
- Repository: `github/gh-aw`
- Affected workflows: `.github/workflows/daily-regulatory.lock.yml`, `.github/workflows/audit-workflows.lock.yml`
- Run count in bounded snapshot: 2
- Representative runs: https://github.com/github/gh-aw/actions/runs/34060583480 and https://github.com/github/gh-aw/actions/runs/34060547558
- Confidence: medium
- Evidence-supported cause: both failures stop at the shared `Execute Codex CLI` step; bounded snapshot does not include enough detail to distinguish tool outage from local misconfiguration
- Bounded fix: inspect and harden the shared Codex CLI setup used by both workflows

Representative runs

- https://github.com/github/gh-aw/actions/runs/34060583480
- https://github.com/github/gh-aw/actions/runs/34060547558

### Control Plane
- Correlation ID: `34064016587-313`
- Central repository: `githubnext/gh-aw-cao`
- Control-plane run: https://github.com/githubnext/gh-aw-cao/actions/runs/34064016587

> Generated by [SelfCare / Open Source Failures](https://github.com/githubnext/gh-aw-cao/actions/runs/34064217561) · pi · gpt54 · 33.4 AIC · ⌖ 8.55 AIC · ⊞ 8.3K · [◷](https://github.com/search?q=repo%3Agithubnext%2Fgh-aw-cao+is%3Aissue+%22gh-aw-workflow-call-id%3A+githubnext%2Fgh-aw-cao%2Fself-care-open-source-failures%22&type=issues)
> - [x] expires on Sep 20, 2026, 10:37 PM UTC

Compare the shared `Execute Codex CLI` setup in `.github/workflows/daily-regulatory.lock.yml` and `.github/workflows/audit-workflows.lock.yml`, starting with the representative workflow runs linked in the issue. Trace the common environment, credentials, binary, and invocation requirements, then validate the smallest supported fix by confirming that both workflows complete the CLI step successfully in fresh runs.

Written by the indexing model from the issue text.