test: isolate Codex credential files from ambient accounts

Deny Codex-owned credential I/O in test contexts unless fixtures are explicitly scoped. Preserve production auth behavior and migrate existing synthetic homes without weakening assertions.