chore: Add codex+claude as provisioned agents

[dpup]

No description provided.

[claude]

Claude finished @dpup's task in 3m 33s —— View job

---

Review of PR #455

• Gather context (diff, changed files)
• Run /code-review skill
• Post review summary

Change: Adds agents: [claude, codex] to the repo-root moat.yaml (a personal/dev container config), a one-line addition.

Findings: None. This is a correct, minimal application of an existing, documented config mechanism:

• Both claude and codex are valid registered agent names (internal/providers/claude/provider.go, internal/providers/codex/provider.go).
• Claude's default dependencies (node, git, claude-code) are already satisfied by the file's dependencies: list — no duplication or conflict.
• Codex's default dependency codex-cli is correctly omitted and will be auto-provisioned.
• Codex requires the openai grant, which isn't explicitly listed, but ExpandAgents/AppendDerivedGrants auto-derives and appends it — matching the documented behavior and example in docs/content/reference/02-moat-yaml.md (agents: [claude, codex] is the doc's own example).
• No CI or test parses this repo-root file directly, so there's no schema-validation risk.

No bugs, security issues, or CLAUDE.md convention violations found. LGTM.