Review checklist for Codex-backed API routes: contract validation, thread resume, and command execution logs