fix: harden arg0 helper PATH handling#8766

bolinfest merged 12 commits intomainopenai/codex:mainfrom

codex/fix-sandbox-bypass-vulnerability-in-codexopenai/codex:codex/fix-sandbox-bypass-vulnerability-in-codexCopy head branch name to clipboard