fix(codex): validate OAuth credentials before enabling configuration