codex: avoid IFD for derived paths

Normalize derived skills and hooks during builds, and defer plugin, marketplace, and rule validation outside evaluation.