Codex CLI 0.158: approval for elevated commands and MCP OAuth client secrets

Codex CLI v0.158.0 enables terminal input approval by default for commands running with elevated permissions and adds support for MCP servers requiring pre-registered OAuth client secrets via codex mcp add --oauth-client-secret. Sandbox fixes land on Windows, Linux and macOS, while v0.159.2 stops console windows from flashing on Windows.

• Terminal input approval is on by default for elevated commands in v0.158.0
• codex mcp add --oauth-client-secret supports MCP servers without Dynamic Client Registration
• Linux sandbox startup with nested writable roots is fixed
• v0.159.2 is a Windows-only patch that stops console windows from flashing