docs: refresh Codewith release notes

[andrei-hasna]

Summary

• update the 0.1.56 changelog so it covers post-bump commits fix(release): install cross target std into hermetic rustup home #108-fix(auth): ignore empty credits for profile usage health #112 now included under rust-v0.1.56
• document the cross-target release workflow invariant in the package builder README
• record Windows exec-server file identity hardening and auth-profile empty-credit usage health behavior
• refresh MODULE.bazel.lock after the recent dependency changes; CI reported the lockfile was stale

Validation

• git diff --cached --check
• gitleaks git --staged --no-banner --redact --config .gitleaks.toml
• git diff --check HEAD^..HEAD for each commit
• gitleaks git --log-opts HEAD^..HEAD --no-banner --redact --config .gitleaks.toml for each commit
• bazel --batch --output_user_root=/tmp/codewith-fdda-bazel4 --noexperimental_remote_repo_contents_cache mod deps --lockfile_mode=update --repo_contents_cache=/tmp/codewith-fdda-repo-contents-cache --repository_cache=/tmp/codewith-fdda-repo-cache
• bazel --batch --output_user_root=/tmp/codewith-fdda-bazel-check --noexperimental_remote_repo_contents_cache mod deps --lockfile_mode=error --repo_contents_cache=/tmp/codewith-fdda-repo-contents-cache --repository_cache=/tmp/codewith-fdda-repo-cache
• adversarial reviewer checked source commits vs docs; wording tightened for the non-Windows target-std step

Notes

• .codewith/CODEWITH.md and .codewith/skills were in planner scope, but this lifecycle sandbox mounts .codewith read-only. I did not bypass that policy through Git internals; the release-workflow guidance was added to scripts/codex_package/README.md instead.
• No Rust tests were run locally; the only non-doc change is the generated Bazel module lock refresh required by CI.

---

Note

Low Risk
Documentation and generated lock/snapshot changes only; no runtime code paths modified in this diff.

Overview
Expands the 0.1.56 changelog so it reflects PRs #108–#112 (22 merged PRs total) and documents fixes that shipped under that tag: release workflow toolchain/component and cross-target std install steps, Windows exec-server handle-based same-file identity for local reads, and auth-profile usage health when workspace credit snapshots are empty but quota still has capacity.

Updates scripts/codex_package/README.md with the cross-target release invariant: install components from codex-rs/rust-toolchain.toml and add the matrix target std in the same Rust home used for packaging before the first cargo build --target, avoiding missing std after Cargo selects the pinned toolchain.

Also refreshes MODULE.bazel.lock for CI (e.g. anyhow / tar entries) and updates the TUI /changelog preview snapshot to match the revised release notes.

^{Reviewed by Cursor Bugbot for commit 85dc2f8. Bugbot is set up for automated code reviews on this repo. Configure here.}

[andrei-hasna]

Closing as superseded by #207. Replacement #207 carries the current provider/docs cleanup slice and explicitly lists this PR in its carried scope. Please continue review on #207.