Codex CLI 0.146.1: safer auto-review defaults for cyber-capable models

Patch release that tightens the automatic-review defaults applied when running cyber-capable models, and surfaces the resulting permission changes in the terminal UI. Affects anyone on the 0.146 line using those models.

Tool: codex-cli · Version: rust-v0.146.1 · Significance: 2/5 · fix, security