Codex-reference project.get access for coder tasks

`packages/agent-connectors/connectors/codex-reference/agent/main.py:173` calls `project.get` to read the integration branch, branch prefix, push switch and gate commands. The control plane grants `project.get` to the `onboard` persona only (`apps/api/app/persona_registry.py` PROJECT_SETTINGS_LICENCE_BY_PERSONA). For the `coder` tasks this connector serves, the call returns 403, the same failure that ended report-sample's dev run 5314 (Task 10706). The connector's tests miss it because the fake node answers `project.get` for any persona. - Give codex-reference the branch, base, push and gate facts it needs from a source a coder task may read (for example the task's dispatch projection or its environment), or else expose a read-only project view to coder personas. Pick whichever is smaller. - Make the fake node refuse `project.get` for personas that do not hold the licence, so connector tests catch this class of bug. Out of scope: the codex-reference merged-PR live run (deferred by the operator); report-sample (fixed in PR #7157). Done means: - A codex-reference test against a coder-persona fake node that refuses `project.get` passes. - `./dc check quick` and the agent-connectors suite are green.

codex-reference now reads its branch/base/push/gate settings from task.get's new `project` field instead of project.get (onboard-only); fake node refuses project.* for unlicensed personas. Quick gate + connectors suite green; PR #7161 queued in merge lane. Memory: used mem-28581.