[codex] Add external guardrails catalog and runtime controls #267

Job	Run time
detect touched entries	7s
gitleaks (secret scan)	7s
dashboard-ui (typecheck + build)	10s
control-plane (go vet + go test -race)	20s
cli (bun typecheck + tests)	28s
ledger (cargo test)	0s
	1m 12s

Provide feedback