Codex is being pushed beyond a cloud coding helper into a broader workstation-style agent, and that shift turns permissions, browser access, and human approval into the real security story.