Changelog UpdateOpenAI/Codex CLICLILinux sandbox can mount paths read-only to better protect files from writes. (#9112)