Derive API key from AUTH_TOKEN_1 hash for stable restarts

Fix payload: use instructions field for codex protocol

Disguise process name and inject identity system prompt

Add Docker deployment with secret-based auth injection

initial commit