Fix Codex 0.99.0 config schema and add workflow invocation docs

[Copilot]

Updated Codex configuration to match 0.99.0 schema requirements and added operator runbook section for workflow invocation.

Changes

• .github/codex/configs/mcp-full.toml: Renamed sandbox_mode → sandbox_policy and removed deprecated web_search top-level key to align with Codex 0.99.0 schema
• docs/runbooks/github-codex-action-mcp.md: Added "How to run" section covering:
  • Manual trigger instructions for both workflows with required/optional inputs
  • Automatic trigger details (PR events, weekly Monday 14:00 UTC cron)
  • Key configuration values and artifact retention

Before:

model = "gpt-5-codex"
approval_policy = "never"
sandbox_mode = "workspace-write"
web_search = "live"

After:

model = "gpt-5-codex"
approval_policy = "never"
sandbox_policy = "workspace-write"

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

---

Continue Tasks: ▶️ 5 queued — View all

[ghost]

Rooviewer   See task

Reviewed the Codex 0.99.0 configuration updates and workflow documentation. Found one documentation clarity issue.

• Clarify that fork PR protection applies to both automatic and manual workflow triggers

_{Mention @roomote in a comment to request specific changes to this pull request or fix all unresolved issues.}

[ghost]

The fork PR protection applies to both automatic and manual triggers, but the documentation only mentions it under "Automatic triggers". When manually triggering via workflow_dispatch, the workflow will still fail if the target PR is from a fork (see lines 36-54 in the workflow file where the fork check runs for both event types). This could confuse operators who attempt manual reviews on fork PRs expecting them to work.

_{Fix it with Roo Code or mention @roomote and request a fix.}