v1.4.135-rc.4

What's Changed

• fix(codex): harden WSL hook path trust lifecycle by @AmethystLiang in #8191
• Make Windows workspace deletion reliable and respect Git locks by @Jinwoo-H in #7963
• fix terminal false unread from title-only idle by @gatsby74 in #7818
• fix(agent-status): filter harness-injected turns by tag shape, not a literal list by @brennanb2025 in #7971
• fix(browser): snapshot Chromium cookie WAL safely by @AmethystLiang in #8195
• fix(source-control): avoid render-time layout reads by @AmethystLiang in #8193
• fix(git): cache unsupported capabilities per host by @nwparker in #8109
• STA-1598: Handle CRLF project headers during Codex config repair by @Jinwoo-H in #8197

Full Changelog: v1.4.135-rc.3...v1.4.135-rc.4