chore: remove ephemeral agent and session comments

Delete the orphaned root CODEX_NOTES.md (an M3.7 codex-review round-1
session log; its substantive content is consolidated in the living
design/CODEX_NOTES.md, and it points to a dead .claude/ agent spec).

Repoint the three literal "CODEX_NOTES.md" file references that would
otherwise dangle to "design/CODEX_NOTES.md" (the surviving residuals
tracker that records the disk-full known-gap and the M2 NFC-collision
deferral), and drop a stale CODEX_NOTES pointer from a chaos scenario
note string that already self-documents the gap.

Remove one pure review-session sentence from a sqlite test comment; the
preceding lines already fully explain the regression the test guards.

Behavior-neutral: comments + one descriptive note string only. The
in-code codex finding-ID / DESIGN / SPEC citations are kept - they are
load-bearing explanations and stable anchors into design/CODEX_NOTES.md.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UBkoioGf5QscNHccKyhQj2

Author: pmaxhogan

CODEX_NOTES.md

@@ -1151,7 +1151,7 @@ impl Scenario for NameTrailingSpaceAndDot {
             invariants: Some(invariants),
             notes: vec![format!(
                 "{matched} of {} trailing-space/dot names round-tripped; the trailing-dot name \
-                 collapses on the M3 scanner (documented V1 gap, tracked in CODEX_NOTES)",
+                 collapses on the M3 scanner (documented V1 gap)",
                 expected.len()
             )],
         })

crates/driven-chaos/src/scenarios/filenames.rs

@@ -320,7 +320,7 @@ impl Scenario for DiskFullTarget {
         // VSS-temp spool on the source volume) that V1 does not have. Rather
         // than fabricate a pass or assert a code the read-only path cannot
         // emit, the row stays an honest documented known-gap (recorded in
-        // CODEX_NOTES.md) behind the mount-privilege gate.
+        // design/CODEX_NOTES.md) behind the mount-privilege gate.
         anyhow::bail!(
             "disk-full-target: core ENOSPC->local.disk_full mapping is implemented + unit-tested, \
              but V1's read-only source path never writes to the source volume, so a full source \

crates/driven-chaos/src/scenarios/storage.rs

@@ -982,7 +982,7 @@ impl SyncOrchestrator {
 
     /// Writes a durable `activity_log` ERROR row per NFC collision the planner
     /// dropped (SPEC s24 `local.unicode_collision`, the M2-deferred item in
-    /// CODEX_NOTES.md).
+    /// design/CODEX_NOTES.md).
     ///
     /// One row per colliding path so the Activity dashboard can list each
     /// clash; `event_type` carries the stable code and `message` carries the

crates/driven-core/src/orchestrator.rs

@@ -3444,8 +3444,7 @@ mod tests {
         // (enabled = 0, no ack row) must NOT be seeded an ack row by the repair -
         // otherwise the per-account ack path (which re-enables every source with a
         // pending ack) would silently RE-ENABLE it and start backing it up the next
-        // time the recovery phrase is acked. This is the exact regression the
-        // post-fix codex recheck flagged.
+        // time the recovery phrase is acked.
         let (repo, _dir) = temp_repo().await;
 
         let acct = sample_account(); // stamped (encryption_master_key_id = kc:alice)