docs(codex): correct loader comment (was still claiming shared policy)

Round 4 doc fix on #1133. My previous docstring fix on
`shouldAllowOAuthModel` correctly noted that plugin/openai/codex.ts
has its own separate filter, but the LOADER comment 5 lines below
still said "this filter and the sibling in plugin/openai/codex.ts
share one source of truth" — kilo + cubic both flagged the
contradiction independently.

Rewrote the loader comment to match the helper docstring: this file
is the active plugin, the sibling is an unwired refactor with its
own ALLOWED_MODELS + parseFloat > 5.4 fallback, they do NOT share a
source of truth today.

Doc-only. 26/26 tests pass; typecheck clean; marker guard clean.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: sahrizvi

packages/opencode/src/plugin/codex.ts

@@ -429,10 +429,15 @@ export async function CodexAuthPlugin(input: PluginInput): Promise<Hooks> {
         if (auth.type !== "oauth") return {}
 
         // Filter models to only those the ChatGPT-subscription (Codex) tier
-        // accepts. Delegates to ``shouldAllowOAuthModel`` (module-level, above)
-        // so this filter and the sibling in plugin/openai/codex.ts share one
-        // source of truth. See OAUTH_ALLOWED_MODELS + shouldAllowOAuthModel
-        // for the criteria + how to add new gpt-5.N releases.
+        // accepts. Delegates to ``shouldAllowOAuthModel`` (module-level,
+        // above). See OAUTH_ALLOWED_MODELS + shouldAllowOAuthModel for the
+        // criteria + how to add new gpt-5.N releases.
+        //
+        // NOTE: this file is the ACTIVE plugin (wired via plugin/index.ts).
+        // The sibling plugin/openai/codex.ts is an unwired in-progress
+        // refactor that keeps its OWN ALLOWED_MODELS + parseFloat > 5.4
+        // fallback — this filter does NOT share a source of truth with it.
+        // Adopting shouldAllowOAuthModel there is followup on that refactor.
         // (Closes #1132 — GPT 5.6 missing from picker.)
         for (const modelId of Object.keys(provider.models)) {
           if (!shouldAllowOAuthModel(modelId)) delete provider.models[modelId]