How should an env example enforce a prompt-only Codex contract safely?