feat: add execpolicy approval option for Codex

[OrdinarySF]

Summary

• Add a Codex permission option to approve an execpolicy amendment ("always allow command").
• Carry execpolicy amendment payloads through sync/request types and storage schemas.
• Ensure permission tool-call inputs stay updated so the proposed amendment is visible.

Changes

• Permission UI now renders a "Yes, always allow globally" button when proposedExecpolicyAmendment is present, with loading/disabled states aligned to other Codex actions.
• sessionAllow accepts approved_execpolicy_amendment plus an execPolicyAmendment payload and sends it via the permission RPC.
• Reducer updates existing tool-call inputs when permission messages arrive (captures updated arguments such as execpolicy amendments).
• Types/schemas updated to include approved_execpolicy_amendment across sync, storage, and message models.
• New i18n string added for the execpolicy approval button across locales.

Related

• feat(codex): support execpolicy approvals and MCP tool calls happy-cli#102