add manual tool execution mode

Co-authored-by: Codex <noreply@openai.com>

codex-rs/core/config.schema.json

@@ -1543,9 +1543,25 @@
       },
       "type": "object"
     },
+    "ToolExecutionMode": {
+      "enum": [
+        "auto",
+        "manual"
+      ],
+      "type": "string"
+    },
     "ToolsToml": {
       "additionalProperties": false,
       "properties": {
+        "execution_mode": {
+          "allOf": [
+            {
+              "$ref": "#/definitions/ToolExecutionMode"
+            }
+          ],
+          "default": null,
+          "description": "Execution policy for approval-capable tools."
+        },
         "view_image": {
           "default": null,
           "description": "Enable the `view_image` tool that lets the agent attach local images.",