Safe Codex sidecar execution for reviews, codebase exploration, risk checks, and isolate…