never let sandbox write to .codex/ or .codex/.sandbox/#8683

iceweasel-oai merged 1 commit intomainopenai/codex:mainfrom

dev/iceweasel/no-restricted-sandbox-dir-writeopenai/codex:dev/iceweasel/no-restricted-sandbox-dir-writeCopy head branch name to clipboard