Persist upstream Radar review artifacts

[yvette-carlisle]

Summary

• refresh the deterministic openai/codex upstream review queue
• add GitHub change bundles and source-backed upstream reviews for PRs 26835, 27191, 27085, and 27223
• promote PRs 27191, 27085, and 27223 into upstream-impact and social-candidate handoff artifacts

Reviewed subjects

• [codex] Test extension API contracts openai/codex#26835: extension API contract tests; review-only, no follow-up
• Route hosted Apps MCP through extensions openai/codex#27191: hosted Apps MCP through extensions; impact + social candidate
• Use server app auth requirements for remote plugin install openai/codex#27085: remote plugin install app-auth metadata; impact + social candidate
• fix: use plugin service route for remote uninstall openai/codex#27223: remote plugin uninstall plugin-service route fix; impact + social candidate

Validation

• decodex radar bundle validate for PRs 26835, 27191, 27085, and 27223
• decodex radar validate
• cargo make check-site-content
• cargo make decodex-checks

Persistence

• branch: automation/upstream-radar-review-20260610-plugin-batch
• commit: e04ecbb7703bae8a70327ea6f640a4a1efa73f7d