It's a bit hand-holdy in that it pre-downloads issue list but that keeps codex running in read-only no-network mode.
Auto label issues using codex cli