feat: render agentrun codex config from yaml

config/agentrun.yaml

@@ -1006,6 +1006,48 @@ controlPlane:
             key: config.toml
           providerCredential:
             profile: codex
+        - id: provider-gpt-pika-auth-json
+          sourceMode: file
+          sourceRef: /root/.codex/auth.json
+          targetRef:
+            namespace: agentrun-v02
+            name: agentrun-v02-provider-gpt-pika
+            key: auth.json
+          providerCredential:
+            profile: gpt.pika
+        - id: provider-gpt-pika-config
+          sourceMode: codex-config
+          sourceRef: config/agentrun.yaml#controlPlane.lanes.nc01-v02.secrets.provider-gpt-pika-config.codexConfig
+          codexConfig:
+            modelProvider: OpenAI
+            model: gpt-5.4-mini
+            reviewModel: gpt-5.4-mini
+            modelReasoningEffort: xhigh
+            disableResponseStorage: true
+            networkAccess: enabled
+            windowsWslSetupAcknowledged: true
+            serviceTier: fast
+            modelProviders:
+              OpenAI:
+                name: OpenAI
+                baseUrl: https://api.pikapython.com/
+                wireApi: responses
+                requiresOpenaiAuth: true
+            features:
+              goals: true
+            projects:
+              /root:
+                trustLevel: trusted
+              /root/unidesk:
+                trustLevel: trusted
+            tuiModelAvailabilityNux:
+              gpt-5.4-mini: 4
+          targetRef:
+            namespace: agentrun-v02
+            name: agentrun-v02-provider-gpt-pika
+            key: config.toml
+          providerCredential:
+            profile: gpt.pika
         - extends: controlPlane.templates.secrets.githubPrRawToken
         - extends: controlPlane.templates.secrets.unideskSshToken
       extends: controlPlane.templates.agentrunV02Lane

config/hwlab-node-lanes.yaml

@@ -964,7 +964,7 @@ lanes:
           secretNamespace: agentrun-v02
           repoUrlFrom: runtimeGitReadUrl
           providerIdFrom: runtimeNodeId
-          defaultProviderProfile: fake-echo
+          defaultProviderProfile: gpt.pika
           codexStdioSupervisor: repo-owned
         publicExposure:
           extends: templates.hwlabV03.publicExposurePk01