Fix payload: use instructions field for codex protocol

Disguise process name and inject identity system prompt

Add Docker deployment with secret-based auth injection