feat: add multi-key support with automatic rate-limit rotation
feat: add --model flag, isKnownModelID routing, [1M] context tag
Codex TOML config can be corrupted by naive string parsing
No authentication on proxy endpoints, no TLS
os.UserHomeDir() error silently ignored - config files written to /
Unbounded streaming buffers (OOM risk)
Upstream response headers forwarded verbatim (request smuggling)
No request body size limits on proxy endpoints
API key leaked to child processes via os.Environ()
ocgo stop can kill wrong process (PID file TOCTOU)