Codex: observe approvals and interrupts via native hooks

- PermissionRequest (all tools) marks the row blocked with tool detail, without
  deciding. Keeps pty:approval context when the PTY scrape saw it first.
- Interrupt (Esc / aborted approval, which skips Stop) returns to listening.
- PostToolUse now matches every tool so an approved apply_patch/MCP call clears
  the block; denials clear via Interrupt, Stop, or the next PreToolUse.
- PreToolUse also matches apply_patch and spawn_agent, logging every file a
  patch writes. Current Codex calls apply_patch from code-mode exec, which the
  rollout watcher never saw; the hook covers both paths, so the watcher is
  removed rather than duplicating file-edit events and collision alerts.
- Status detail: file path from apply_patch envelopes, spawn_agent message.