fix(usage): resolve account labels through pricing identity

[lidge-jun]

Summary

• Resolve account-label estimates through exact configured Codex identities and effective log labels, preserving literal configured provider namespaces and explicit user overrides. Never guess arbitrary suffixes or display aliases.
• Apply the selected pricing namespace consistently to context/Fast/lower-bound modifiers. Identity changes invalidate caches; presentation-only changes do not. Original request attribution remains unchanged.

Closes #3817

Verification

• Local test suites, typecheck, build and install: NOT RUN, explicitly prohibited by the maintainer.
• Exact top head: fe9460372597061f572beee6c325009fef618c42. Cross-platform CI run 34120761219. PASS under the explicit per-chain acceptance policy: all 16 required jobs completed successfully: Linux 4, macOS 2, gates, API usage, storage, all keyring/npm jobs, and Docker. Excluded Windows shards/macOS control are still running and are not part of this verdict.
• Remote gates: GUI 1787 pass / 0 fail; lint 0 errors / 0 warnings; TypeScript, privacy scan and GUI build passed.
• Independent review: Astra-high Ohm: PASS, blockers=0 at d070a0cf162371081eff3b4314e85484e668caf0. Reviewed exact identity, namespace/tier parity and cache invalidation. Later fixture-only privacy repair uses approved example.test addresses; no production change.
• Later explicit user policy: Windows 6 shards and macOS control are excluded from per-chain acceptance and reserved for one final release-train-head verification. Their state is not represented as passing evidence for this chain.

Manual dependent chain

Layer	PR	Head SHA	Base
D1	#3877	c35b5a6e504a4513ad59957f5c81b7db45f8bec6	dev
D2	#3902	c5fb7e3332432c6546bffa9990bce5b971653139	#3877
D3	#3903	c44c6de87389a95ab798b648659fbc0838af170b	#3902
D4	#3904	5669413794ca54388782f6758171a81a2d1b361e	#3903
D5	#3905	fe9460372597061f572beee6c325009fef618c42	#3904

Ordinary dependent PRs only; native stack membership checked separately, no native registration. Main task alone performs maintainer integration under MAINTAINERS.md; this is not self-approval. Before integration, refresh dev and prove expected cumulative tree equals the tested top tree. No merge performed by this lane.

Checklist

• Scope stays focused and avoids unrelated cleanup.
• Docs or release notes were updated when needed.
• Security-sensitive changes were reviewed for secrets, auth, and unsafe defaults.

---

Maintainer integration decision (MAINTAINERS.md, dev-only admin integration): @lidge-jun integrates lane D's manual chain (#3877 → #3902 → #3903 → #3904 → #3905) into dev bottom-up. Chain-top evidence at head fe9460372: Cross-platform CI run 34120761219 — Linux test 1/4–4/4, macOS 1/2, 2/2, gates (GUI 1787/0, lint, typecheck, privacy, build), storage policy, api usage, keyring ×3, npm-global ×3, docker smoke = success; Windows shards and macos control deferred to the final release-train head by maintainer policy. Prospective merge tree of origin/dev@f4a4b468f + top = ded24302f = tested tree. Independent per-layer reviews PASS; screenshots from this run's dashboard-preview artifact. Local suites NOT RUN. Maintainer integration, not self-approval.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

🗂️ Base branches to auto review (2)

• ^dev$
• ^preview$

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Team

Run ID: 70db46b3-f7cd-4364-a3a5-31e1deaf7237

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

✅ Deterministic PR hygiene checks passed.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-07T12:33:00.923239Z	c44c6de	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[github-actions]

⏳ DRAFT

• UI screenshot required.

What to do

• Add a screenshot of the UI change to the PR description.

Automatic draft conversion failed (token cannot change draft status). Please convert this pull request to a draft manually. The required enforce-target check will keep failing until every issue above is resolved.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: c44c6de873

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".