Changelog UpdateOpenAI/Codex CLICLI#9314 fix(windows-sandbox): deny .git file entries under writable roots @MaxMiksa