Changelog UpdateOpenAI/Codex CLICLI#8275 grant read ACL to exe directory first so we can call the command runner