fix: OpenAI provider sandbox value for write mode
Codex CLI accepts 'workspace-write', not 'write', for --sandbox. The
old value caused agents with write:true to fail immediately with
'invalid value' error. Discovered via morning_briefing agent testing.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>