9c2682cea2
- Routed Codex web search through configured Responses base URLs, API keys, and headers while preserving the official OAuth backend. - Refused OAuth leakage to custom endpoints and stopped explicitly selected providers from silently falling back. - Added transport, safety, and fail-closed regression coverage. Fixes #6001