Attach guardian rollouts to feedback uploads

Add guardian review_thread_id plumbing so feedback can resolve the hidden guardian session rollout and attach it alongside the parent rollout in both app-server and local /feedback flows.

Co-authored-by: Codex <noreply@openai.com>

codex-rs/app-server-protocol/schema/json/codex_app_server_protocol.v2.schemas.json

@@ -4554,6 +4554,12 @@
             "null"
           ]
         },
+        "reviewThreadId": {
+          "type": [
+            "string",
+            "null"
+          ]
+        },
         "riskLevel": {
           "anyOf": [
             {