Publish optional bundled Codex cask

[SunChJ]

Summary

• download and verify the standard and bundled-Codex release archives
• publish both gloss and gloss-with-codex casks
• validate each cask's token, conflict, URLs, checksums, and installation safeguards
• smoke-test both variants on arm64 and x86_64 runners
• preserve the existing required check names for the standard cask

The default sunchj/tap/gloss installation remains lightweight. Users can explicitly install the bundled runtime with:

brew install --cask sunchj/tap/gloss-with-codex

Companion release PR: SamsonLab/gloss#17

Validation

• Python unit tests: 8 passed
• generated standard and bundled casks validated against release metadata
• brew style passed for both generated casks
• workflow YAML and Python syntax checks passed