feat: backport Codex credential guardrails from Spec Kitty (v0.0.21)#1139

robertDouglass wants to merge 1 commit intogithub:maingithub/spec-kit:mainfrom

robertDouglass:mainrobertDouglass/spec-kit:mainCopy head branch name to clipboard