Sandbox mode

Agent texnik jihatdan nima qila olishini cheklaydi: read-only (faqat o‘qish), workspace-write (faqat ish papkasiga yozish, tarmoq sukut bo‘yicha o‘chiq), danger-full-access (cheklovsiz).

codex --sandbox workspace-write