* fix(deploy): use network_mode host to fix loopback guard on Linux Docker
* fix(deploy): address review feedback — wire OD_PORT and tighten auth note
* fix(deploy): wire OD_PORT in Linux override and include linux override in systemd unit and updater
* fix(deploy): lock OD_BIND_HOST to loopback for host networking in Linux
* fix(deploy): add support for mounting host agent CLIs in Linux and extend Dockerfile for glibc compatibility
* fix(deploy): update user in Dockerfile and docker-compose for compatibility with glibc and ownership adjustments
* fix(docs): update Codex install path in README for clarity
---------
Co-authored-by: kemycrome <luca.gernone@gmail.com>