roadmap(selfhost): harden review stack and reduce hosted cost

[JSONbored]

Summary

Track the remaining maintainer-only work for the self-hosted Gittensory review stack: reduce leftover hosted surface area, finish Codex support, improve observability, and make repo configuration easier to manage.

Context

The maintainer stack is now moving toward a Git-backed self-host deployment, but there is still cleanup and hardening work left before official images/packages should be treated as ready. The old hosted/cloud path may still have Cloudflare resources that are no longer active, while the self-hosted stack needs clearer configuration, provider selection, Sentry coverage, and Codex usage visibility.

Requirements

• Do not delete or decommission any hosted resource until its current usage and rollback value are documented.
• Preserve Claude Code support while Codex and Ollama support are improved.
• Keep custom repo-scoped review instructions, skills, secrets, repo data, and local deploy overrides intact.
• Prefer maintainable self-hosted defaults where they reduce cost or latency without weakening reliability.
• Keep all child work maintainer-only until it is ready to expose more broadly.

Child issues

• chore(cloudflare): inventory legacy hosted resources for cleanup #1668 — Cloudflare hosted resource inventory and cleanup plan.
• chore(selfhost): evaluate hosted features to move into the stack #1669 — Hosted-to-self-host migration decisions.
• feat(config): add complete and minimal gittensory config templates #1670 — Complete and minimal Gittensory config templates.
• feat(review): inventory and gate REES analyzers #1671 — REES analyzer inventory, toggles, and tests.
• feat(review): validate CodeRabbit-style review options #1672 — CodeRabbit-style review option validation.
• feat(admin): generate review config from dashboard controls #1673 — Dashboard/admin config generator planning and implementation.
• feat(observability): expand Sentry instrumentation for self-host reviews #1674 — Sentry instrumentation expansion for self-host reviews.
• feat(selfhost): complete Codex reviewer modes and fallbacks #1675 — Codex reviewer modes and provider fallbacks.
• feat(observability): add Codex usage and cost tracking dashboard #1676 — Codex usage and cost tracking dashboard.
• build(selfhost): prepare official images after stack validation #1677 — Official image/package publishing after validation.

Related existing issue

• build(selfhost): make host deploys Git-backed and image-ready #1660 — Git-backed maintainer deploy and image-ready host setup.

Acceptance criteria

• Each child task has clear requirements, deliverables, and non-goals.
• No destructive cleanup happens without a reviewed issue and explicit approval.
• All children are assigned to jsonbored and labeled only maintainer-only.