Merge remote-tracking branch 'origin/rhan/escalations-approvals-sandbox' into rhan/approval-source1

# Conflicts:
#	codex-rs/app-server-protocol/schema/typescript/ResponseItemMetadata.ts
#	codex-rs/core/src/codex_tests.rs
#	codex-rs/protocol/src/models.rs

codex-rs/app-server-protocol/schema/json/codex_app_server_protocol.schemas.json

@@ -10728,16 +10728,6 @@
             "description": "Client-visible metadata ID generated by Codex for this item.",
             "type": "string"
           },
-          "sandbox_policy": {
-            "anyOf": [
-              {
-                "$ref": "#/definitions/v2/SandboxPolicyMetadata"
-              },
-              {
-                "type": "null"
-              }
-            ]
-          },
           "user_message_type": {
             "anyOf": [
               {
@@ -10782,16 +10772,6 @@
               }
             ]
           },
-          "sandbox_policy": {
-            "anyOf": [
-              {
-                "$ref": "#/definitions/v2/SandboxPolicyMetadata"
-              },
-              {
-                "type": "null"
-              }
-            ]
-          },
           "user_message_type": {
             "anyOf": [
               {
@@ -11197,14 +11177,6 @@
           }
         ]
       },
-      "SandboxPolicyMetadata": {
-        "enum": [
-          "read_only",
-          "sandbox",
-          "full_access"
-        ],
-        "type": "string"
-      },
       "SandboxWorkspaceWrite": {
         "properties": {
           "exclude_slash_tmp": {