fix(rust): migrate CodeNexusLite facade and check-hardcoded-paths to Rust

[2233admin]

目标

全砍 ps1(用户决策,plan: docs/archive/ps1-retirement-plan-2026-08-17.md)的两个硬阻断项:

1. legacy/Invoke-CodeNexusLite.ps1(424行)被 builtin_provider_evidence.rs:276 显式 pwsh 调用,迁移逻辑到 Rust
2. legacy/tools/check-hardcoded-paths.ps1(77行)是 CI 门禁(ci.yml:697),无 Rust 等价,迁移为 code-intel 子命令

验收

• codenexus_admission 不再 spawn pwsh,codenexus-context.json 由 Rust 生成,契约(evidence payload/status 映射/lease)不变
• check-hardcoded-paths 逻辑成为 code-intel 子命令,ci.yml:697 改调它
• cargo test 全绿

关联

• 274(fix(review): remove PS orchestration drift)同方向不重叠
• plan 文档: https://github.com/2233admin/code-intel-pipeline/blob/main/docs/archive/ps1-retirement-plan-2026-08-17.md (待同步)

[2233admin]

Claimed by agent. Branch: agent/ps1-migration-275. 方法: worktree + CodeNexusLite/hardcoded-paths 逻辑迁 Rust。

[2233admin]

状态更新(Claude):

• PR fix(rust): migrate CodeNexusLite facade and check-hardcoded-paths to Rust (#275) #276 已开并推送(Gitea + GitHub),653 测试全绿
• PS1 全砍计划已同步到工具仓: docs/archive/ps1-retirement-plan-2026-08-17.md
• 已向 Codex 的 4 个 open PR(test: report terminated legacy session processes clearly #250/fix(evidence): expand grouped Rust imports #249/fix(doctor): resolve packaged graph binary #248/fix(gate): change-risk 闸判绝对分数,不判会漂的排名 (#201) #202)留跨 agent 评论,知悉改动面与合入顺序
• 剩余全砍项(legacy/ 其余 ps1、Invoke-SentruxAgentTool session 迁移)等待 Codex 落定后执行

[2233admin]

拆分更新(Claude):

• PR fix(rust): generate CodeNexus-lite context in-process, drop pwsh facade call (#275) #277 已开:CodeNexus-lite 进程内迁移(零冲突,648 测试绿)——可独立合入
• hardcoded-paths 迁移:本地分支 agent/hardcoded-paths-275,等 Codex 控制面落定后合入(研究报告:与 Codex task/friction 改动在 command_catalog 等 5 文件高冲突)
• 原 fix(rust): migrate CodeNexusLite facade and check-hardcoded-paths to Rust (#275) #276 已关闭(拆分为上两项)
• 研究报告:docs/research/codex-ps1-sync.md(工具仓侧待同步)

下一步:Codex 控制面提交后 → rebase agent/hardcoded-paths-275 → 开 PR

[2233admin]

Session joins the existing claim on branch agent/hardcoded-paths-275 / PR #278. Approach: fix the three still-valid Rust scanner review findings (legacy match parity, fail-closed discovery/read errors, and JSON exit semantics), add focused regressions, rerun the repository gates, then merge only after required checks are green.

[2233admin]

Completed by merged PRs #277 and #278. #277 moved CodeNexus-lite context generation in-process; #278 moved the hardcoded-path gate to Rust and added fail-closed/exit-semantics regressions. All required checks passed before merge.