chore(repo): Allow GitHub CLI outside the sandbox

[kyleve]

Posted by an AI agent on kve’s behalf.

Summary

• trust every gh command to run outside the project sandbox
• cover authentication, PR, Actions, and API workflows without maintaining a brittle subcommand allowlist
• keep unrelated commands subject to the existing sandbox and approval policy

Why

The GitHub CLI reads its authentication from macOS Keychain, which is unavailable inside the workspace sandbox. A project-local command rule makes the repository’s intended trust boundary explicit and prevents false unauthenticated failures.

Verification

• codex execpolicy check --pretty --rules .codex/rules/github.rules -- gh auth status (allowed)
• codex execpolicy check --pretty --rules .codex/rules/github.rules -- gh api repos/kyleve/Stuff/pulls/222 (allowed)
• codex execpolicy check --pretty --rules .codex/rules/github.rules -- git status --short (no matching rule)
• git diff --check
• ./test not run because this changes only Codex command policy