Data retention

Hosted Codex connection metadata is retained while the connection is active. Disconnecting deletes encrypted material and immediately blocks new cloud executions. Temporary workspace copies are deleted when the Codex process exits and are never written to workspace snapshots.