Attach guardian rollouts to feedback uploads

Add guardian review_thread_id plumbing so feedback can resolve the hidden guardian session rollout and attach it alongside the parent rollout in both app-server and local /feedback flows.

Co-authored-by: Codex <noreply@openai.com>

codex-rs/app-server-protocol/schema/json/codex_app_server_protocol.schemas.json

@@ -7810,6 +7810,12 @@
               "null"
             ]
           },
+          "reviewThreadId": {
+            "type": [
+              "string",
+              "null"
+            ]
+          },
           "riskLevel": {
             "anyOf": [
               {