Changelog UpdateOpenAI/Codex CLICLI#8683 never let sandbox write to .codex/ or .codex/.sandbox/ @iceweasel-oai