fix: resolve Codex runtime asset paths

[chainshieldai]

Summary

• Fix generated host setup fallbacks so $GSTACK_BROWSE, $GSTACK_DESIGN, and $GSTACK_MAKE_PDF are treated as absolute runtime roots instead of being prefixed with $HOME.
• Expose design/dist and make-pdf/dist in Codex runtime roots and repo-local sidecars.
• Add GSTACK_MAKE_PDF to generated external-host preambles and refresh Codex/Factory ship golden fixtures.
• Bump version to 1.17.0.1 and document the install/runtime fix in CHANGELOG.md.

Test plan

• ./setup --host codex
• bun test test/host-config.test.ts test/gen-skill-docs.test.ts (447 pass, 0 fail)
• bun run test (exit code 0; still emits existing harness noise about unavailable test.concurrent in skipped E2E files and one OpenClaw Bun.YAML.parse report while the package script continues)
• Smoke checked generated docs for no $HOME$GSTACK... paths and verified Codex runtime symlinks exist for browse/design/make-pdf under ~/.codex/skills/gstack

---

^{Need help on this PR? Tag @codesmith with what you need.}

• Let Codesmith autofix CI failures and bot reviews