feat(codex): support agent identity accounts

apps/aether-gateway/src/handlers/admin/provider/write/keys/create.rs

@@ -52,6 +52,19 @@ pub(crate) async fn build_admin_create_provider_key_record(
         .and_then(serde_json::Value::as_object)
         .cloned();
 
+    if auth_type == "oauth"
+        && provider.provider_type.trim().eq_ignore_ascii_case("codex")
+        && auth_config
+            .as_ref()
+            .is_some_and(aether_provider_transport::is_codex_agent_identity_auth_config_value)
+    {
+        aether_provider_transport::validate_codex_agent_identity_auth_config(
+            auth_config
+                .as_ref()
+                .expect("Agent Identity auth_config was checked"),
+        )?;
+    }
+
     match auth_type.as_str() {
         "service_account" if auth_config_object.is_none() => {
             return Err("Service Account 认证模式下 auth_config 为必填字段".to_string());