cover-prompt-to-codex-imagelisted

# Cover prompt to Codex image Run M8M flow `cover_prompt_to_codex_image_v1`. It appends to an exact `article2cover_phase1_handoff_v1`, or accepts a legacy cover prompt with explicit identity/reference inputs. It never reanalyzes an article. ## Preferred input ```json { "cover_phase1_handoff_path": "C:\\absolute\\project\\cover-phase1-handoff.json", "cover_phase1_handoff_sha256": "optional 64-character sha256" } ``` The handoff must stay inside its existing project, bind its Phase 1 run, sources, Design and Knowledge snapshots, exact headline, prompt, candidate count, and every reference checksum. Append to that project only. Legacy mode requires `cover_prompt`, `headline`, `composition_id`, exactly one of `face_reference_path` or `person_description`, optional `reference_assets`, and optional `candidate_count`, `project_title`, and absolute `output_root`. Mark provenance `legacy_cover_prompt`. ## Automatic phases 1. `cover_media_request_ready` checksum-validates the request, project, prompt, and references and confirms Pillow plus the worker requirement for Codex built-in `image_gen` and `view_image`. 2. `cover_candidates_generated_frozen` generates pending candidate IDs with built-in ImageGen using all local references in frozen order. It inspects every new image, imports only current-run 3:4 rasters, checkpoints accepted IDs, and retries a failed ID at most three times. 3. `cover_evidence_frozen` creates the candidate contact sheet, headline cro