Codex 0.150+ cannot authenticate with CodSpeed MCP

[KRRT7]

Issue

Running:

codex mcp login CodSpeed

with Codex CLI 0.150.1 fails before opening the browser:

OAuth authorization endpoint origin does not match the authorization server origin without issuer-bound callbacks

MCP configuration:

https://mcp.codspeed.io/mcp

CodSpeed's OAuth metadata currently contains:

{
  "issuer": "https://api.codspeed.io",
  "authorization_endpoint": "https://app.codspeed.io/auth/oauth",
  "token_endpoint": "https://api.codspeed.io/oauth/token"
}

The authorization endpoint has a different origin from the issuer, and
authorization_response_iss_parameter_supported is not advertised.

This began with Codex 0.150.0 following its OAuth issuer-binding change:

openai/codex#39935

Expected: the CodSpeed browser authorization flow opens and completes.