pub fn extract_codex_email(access_token: &str) -> Option<String>
Display-only identity (email claim) carried by a Codex access token, if present. Never a secret; used to label accounts in listings.