An owned registration that the user disabled kept its old command, so a
later re-enable could launch a moved or removed executable, and Codex
skipped the context env_vars. Keep the disable flag but refresh the
managed command, arguments and forwarded context variables.