fix: pass codex app-server model config before subcommand

internal/cloud/code-agent-session-registry.test.mjs

@@ -1160,7 +1160,7 @@ test("Codex app-server args pin repo-owned DEV responses egress without leaking
 
   assert.equal(codexAppServerProviderBaseUrl(env), "http://172.26.26.227:17680/v1");
   const args = codexAppServerArgs(env);
-  assert.deepEqual(args.slice(0, 1), ["app-server"]);
+  assert.ok(args.indexOf("app-server") > args.indexOf("review_model=\"deepseek-chat\""));
   assert.deepEqual(args.slice(-2), ["--listen", "stdio://"]);
   assert.ok(args.includes("model_provider=\"OpenAI\""));
   assert.ok(args.includes("model_providers.OpenAI.base_url=\"http://172.26.26.227:17680/v1\""));

internal/cloud/codex-stdio-session.mjs

@@ -1162,8 +1162,8 @@ export function createCodexStdioSessionManager(options = {}) {
 
 export function codexAppServerArgs(env = process.env) {
   return [
-    "app-server",
     ...codexAppServerProviderConfigArgs(env),
+    "app-server",
     "--listen",
     "stdio://"
   ];