fix: avoid blocking AgentGuard status key placeholders

[Mr-Lucky]

Summary

Allow the documented TYPESAFE_API_KEY=<key> placeholder in agentguard status output without blocking the Codex post-tool hook. Keep blocking output that contains an unmasked secret. Add a regression test using real status output.

Type

• Bug fix
• New feature / detection rule
• Refactoring
• Documentation

Testing

• npm run build passes
• npm test passes (32 tests)
• Manually tested the change

node --test dist/tests/codex-hooks.test.js passes (18/18 tests).

Related Issues

Closes #

[github-actions]

AgentGuard PR Review

1. medium — src/runtime/protect.ts:212-217
   The new placeholder bypass only normalizes the exact string TYPESAFE_API_KEY=<key>. If the status help output uses a different documented placeholder form (for example a different key name, spacing, quotes, or multiple placeholders), redactText(normalized) === normalized will still fail and the hook will block valid status output.
   Fix: normalize the full set of documented placeholder variants explicitly, or change the status-output check to validate against a structured allowlist for the known help text rather than a single literal replacement.