fix: Add -s workspace-write parameter to all codex commands throughout codebase

- Updated all codex command examples to include -s workspace-write parameter
- Fixed commands in agent files, workflow files, and command documentation
- Ensures all codex commands follow proper sandbox security requirements
- Maintains consistency across all documentation and command examples

Files updated:
- CLAUDE.md: Core development guidelines
- RELEASE_NOTES_v1.3.0.md: Release documentation
- .claude/agents/action-planning-agent.md: Agent command templates
- .claude/commands/codex/*.md: All codex command documentation
- .claude/commands/workflow/*.md: Workflow execution templates

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

.claude/commands/codex/mode/auto.md

@@ -19,7 +19,7 @@ Leverages Codex's `--full-auto` mode for autonomous development with intelligent
 
 **Process**: Analyze Input → Select Templates → Gather Context → Execute Autonomous Development
 
-⚠️ **Critical Feature**: Uses `codex --full-auto` for maximum autonomous capability with mandatory `@` pattern requirements.
+⚠️ **Critical Feature**: Uses `codex -s workspace-write --full-auto` for maximum autonomous capability with mandatory `@` pattern requirements.
 
 ## Usage
 
@@ -137,7 +137,7 @@ END FUNCTION
 ### Step 3: Execute with Full Auto Mode
 ```bash
 # Autonomous development execution with comprehensive context
-codex --full-auto "@{**/*} @{CLAUDE.md,**/*CLAUDE.md} $(cat ~/.claude/workflows/cli-templates/prompts/[selected_template])
+codex -s workspace-write --full-auto "@{**/*} @{CLAUDE.md,**/*CLAUDE.md} $(cat ~/.claude/workflows/cli-templates/prompts/[selected_template])
 
 Development Task: [user_input]