fix(server): Codex keeps your permissions profile after Full access and back to Auto#23631

Merge remote-tracking branch 'origin/main' into fix/issue-20266

fix(server): only fall back from a Codex permissions profile on a profile config error (#20266)

fix(server): Codex turns survive a renamed permissions profile, and forks keep it (#20266)

fix(server): Codex keeps your permissions profile when T3 resumes the thread between turns (#20266)

fix(server): Codex keeps your permissions profile after switching to Full access and back (#20266)

test(server): reproduce Codex permissions profile loss after a Full access round trip (#20266)