feat: integrate codex queue and pipeline oa flow

- add Codex Queue microservice/frontend integration and related deployment docs
- document 100% Pipeline OA event-flow requirements and E2E gates
- harden Pipeline frontend Gantt/timeline E2E assertions and rendering

docker-compose.yml

@@ -91,6 +91,47 @@ services:
       timeout: 3s
       retries: 20
 
+  codex-queue:
+    build:
+      context: .
+      dockerfile: src/components/microservices/codex-queue/Dockerfile
+    container_name: codex-queue-backend
+    restart: unless-stopped
+    depends_on:
+      - backend-core
+    expose:
+      - "4222"
+    environment:
+      HOST: "0.0.0.0"
+      PORT: "4222"
+      CODEX_QUEUE_STATE_PATH: "/var/lib/unidesk/codex-queue/state.json"
+      CODEX_QUEUE_WORKDIR: "/workspace"
+      CODEX_QUEUE_CODEX_HOME: "/var/lib/unidesk/codex-queue/codex-home"
+      CODEX_QUEUE_SOURCE_CODEX_CONFIG: "/root/.codex/config.toml"
+      CODEX_QUEUE_DEFAULT_MODEL: "gpt-5.4-mini"
+      CODEX_QUEUE_SANDBOX: "danger-full-access"
+      CODEX_QUEUE_APPROVAL_POLICY: "never"
+      CODEX_QUEUE_MAX_ATTEMPTS: "3"
+      OPENAI_API_KEY: "${OPENAI_API_KEY:-}"
+      CRS_OAI_KEY: "${CRS_OAI_KEY:-}"
+      MINIMAX_API_KEY: "${UNIDESK_CODEX_QUEUE_MINIMAX_API_KEY:-}"
+      MINIMAX_API_BASE: "${UNIDESK_CODEX_QUEUE_MINIMAX_API_BASE:-https://api.minimax.io/v1}"
+      MINIMAX_MODEL: "${UNIDESK_CODEX_QUEUE_MINIMAX_MODEL:-MiniMax-M2.7}"
+      LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_PREFIX}_codex-queue.jsonl"
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - .:/workspace
+      - /root/.codex/config.toml:/root/.codex/config.toml:ro
+      - ${UNIDESK_LOG_DIR}:/var/log/unidesk
+      - ./.state/codex-queue:/var/lib/unidesk/codex-queue
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    healthcheck:
+      test: ["CMD", "bun", "-e", "fetch('http://127.0.0.1:4222/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"]
+      interval: 5s
+      timeout: 3s
+      retries: 20
+
   frontend:
     build:
       context: .