Extra arguments inserted after codex and before exec. Use this for global Codex flags such as --search, --profile ci, -c key=value, --enable feature, or --image path.png. Arguments are split on whitespace. Keep secrets in Jenkins credentials or config, not here.