codex-sandbox

Run code in Codex fully isolated sandbox - network disabled, CWD only, Seatbelt/Docker isolation