[codex] Add local inventory commands for open backlog

[jmcte]

Summary

• Adds read-only command surfaces for Photos screenshots/assets, Notes, Reminders, Safari history, Messages, Contacts, Maps, and News.
• Adds local OpenClaw polling cache support with watch, cache read, and cache status, using 0700 cache directories and excluding high-sensitivity commands from the default watch set.
• Documents the expanded privacy model and records the aggregate issue work result.

Governing Issue

Closes #18
Closes #21
Closes #23
Closes #24
Closes #25
Closes #26
Closes #28
Closes #33
Closes #34

Validation

• Relevant local checks passed
• Required PR checks are expected to satisfy CI Gate
• Skipped checks are explained below

Validation run:

env CLANG_MODULE_CACHE_PATH=/private/tmp/icloud-cli-module-cache bash scripts/ci/run-fast-checks.sh

Result: passed. The same script failed inside the Codex filesystem sandbox before this because SwiftPM tried to write /Users/johnteneyckjr./.cache/clang/ModuleCache; rerunning outside the sandbox with the module cache under /private/tmp passed.

Additional checks:

bash scripts/check-privacy-fixtures.sh
bash scripts/check-detect-secrets.sh --all-files
env CLANG_MODULE_CACHE_PATH=/private/tmp/icloud-cli-module-cache swift test --scratch-path /private/tmp/icloud-cli-all-open-issues/.build

Result: passed; Swift test run reports 47 tests passing.

Live PR check:

PR Fast CI / CI Gate: success

Bootstrap Governance

• Changes are scoped to the linked issues
• Contributor or PR guidance changes are reflected in CONTRIBUTING.md, .github/PULL_REQUEST_TEMPLATE.md, and docs/bootstrap/onboarding.md when applicable
• PR author enabled auto-merge where GitHub allows it, or GitHub plan-limit evidence/unavailable reason is recorded and the fallback merge-readiness policy applies
• No real secrets, runtime auth, or machine-local env files are committed

Flow Contract

• Owner lane: Apollo / Daedalus / Human mixed backlog
• Repair owner: Codex
• Autonomy class: Class 2 / Class 3 mixed; high-sensitivity commands are gated by explicit confirmation flags
• Risk class: High privacy surface, mitigated by read-only access, synthetic fixtures, and explicit opt-in gates

Flow Merge Readiness

• Every blocker has a next actor and next action
• No active blocking requested changes remain
• Non-author approval is present when required
• PR author enabled auto-merge where GitHub allows it, or recorded why it is unavailable/unsafe

Merge Automation

• PR author enabled auto-merge with gh pr merge --auto --squash, or the reason it is unavailable/unsafe is noted below

Notes

• Draft PR because the patch intentionally attempts a broad all-open-issues closure and should get maintainer review before merge.
• Auto-merge was not enabled because local gh auth status reports the default token is invalid; connector PR creation was used instead.