deploy: exclude codex scratch artifacts

scripts/deploy-tailscale.sh

@@ -147,6 +147,7 @@ deploy_node() {
     step "Syncing code"
     rsync -az --delete \
         --exclude='.git' --exclude='node_modules' --exclude='target/debug' \
+        --exclude='.codex-target-*' --exclude='.codex-tmp' \
         --exclude='target/release/deps' --exclude='target/release/build' \
         --exclude='target/release/.fingerprint' --exclude='target/release/incremental' \
         --exclude='web/dist' --exclude='.DS_Store' --exclude='image-recipe/build' \

scripts/deploy-to-target.sh

@@ -164,6 +164,7 @@ if [[ "$DRY_RUN" == "true" ]]; then
     echo "Files that would be synced:"
     rsync -avn --exclude '.git' --exclude 'target' --exclude 'node_modules' \
         --exclude 'dist' --exclude 'web/dist' --exclude '*.iso' \
+        --exclude '.codex-target-*' --exclude '.codex-tmp' \
         "$PROJECT_DIR/" "$TARGET_HOST:$TARGET_DIR/" 2>/dev/null | \
         grep -E '^[<>]|^deleting' | head -50 || echo "  (rsync check failed — SSH may be unavailable)"
     echo ""
@@ -546,6 +547,8 @@ rsync -avz --delete \
     --exclude 'target' \
     --exclude 'dist' \
     --exclude '.git' \
+    --exclude '.codex-target-*' \
+    --exclude '.codex-tmp' \
     --exclude 'image-recipe/build' \
     --exclude 'image-recipe/results' \
     "$PROJECT_DIR/" "$TARGET_HOST:$TARGET_DIR/"