Clarified MAC Codex runtime boundaryDocumented that MAC Codex consumes MAC MCP capabilities instead of owning the runtime.Open doc