feat(catalog): mark tfsec deprecated, fix codex entry

tfsec:
- Mark as deprecated (superseded_by: trivy)
- tfsec has been merged into Trivy for IaC scanning
- Add link to official migration guide

codex:
- Fix broken entry that pointed to non-existent repo
- Was installing wrong package (comic archive server)
- Now correctly points to OpenAI Codex CLI (@openai/codex)
- OpenAI's open-source coding agent for terminal

Author: CybotTM

catalog/codex.json

@@ -1,11 +1,17 @@
 {
   "name": "codex",
   "category": "ai",
-  "install_method": "uv_tool",
-  "description": "CLI tool for generating and managing code documentation",
-  "homepage": "https://github.com/codex-cli/codex",
-  "package_name": "codex",
-  "python_version": "3.13",
-  "version_command": "uv tool list | grep '^codex ' | awk '{print $2}'",
-  "notes": "Codex is a web server app - running codex --version starts the full server. Use uv tool list for version detection."
+  "install_method": "npm",
+  "description": "OpenAI Codex CLI - lightweight coding agent that runs in your terminal",
+  "homepage": "https://github.com/openai/codex",
+  "github_repo": "openai/codex",
+  "package_name": "@openai/codex",
+  "binary_name": "codex",
+  "version_command": "codex --version 2>/dev/null | head -1",
+  "guide": {
+    "display_name": "OpenAI Codex CLI",
+    "install_action": "upgrade",
+    "order": 401
+  },
+  "notes": "OpenAI's open-source coding agent. Requires OPENAI_API_KEY. Supports multiple AI providers including third-party models."
 }

catalog/tfsec.json

@@ -11,5 +11,8 @@
     "x86_64": "amd64",
     "aarch64": "arm64",
     "armv7l": "arm"
-  }
+  },
+  "deprecated": true,
+  "superseded_by": "trivy",
+  "deprecation_message": "tfsec has been merged into Trivy. Use 'trivy config' for Terraform scanning. See migration guide: https://github.com/aquasecurity/tfsec/blob/master/tfsec-to-trivy-migration-guide.md"
 }