Function resolve_identity 

pub fn resolve_identity(
    env: &EnvSnapshot,
    home: &Path,
) -> (Identity, Vec<ToolError>)

Env vars first; only OPENCODE_CTL_PAIR set means the record supplies the rest. Returns the identity and the startup warnings (logged by the caller). An invalid id leaves the server unpaired.