Repin the read-only credential build, disclose its static-key CLI transport and the core compatibility requirements, and match the manifest version. Co-authored-by: Codex <codex@openai.com>