Redact leaked HF and API tokens from Codex session traces
Takeaway: Next time I'd tell it upfront that Codex session history lives in ~/.codex/sessions, not just the project-local .codex folder — that's the correction that actually mattered here since the first pass found nothing.