OpenAI Codex Kanban Agent cannot access Kanban runtime on localhost, Kanban CLI depends on http://127.0.0.1:3484

### What happened?

This is not a bad shell/profile/path issue. The Kanban task agent is being launched under Codex with networking disabled, so it cannot talk to the Kanban runtime on localhost.

Evidence

From inside the failing agent session:

env contains:
CODEX_SANDBOX_NETWORK_DISABLED=1
process tree shows:
codex.js exec ... sandbox_mode=workspace-write
vendored Codex binary running the task
direct socket access fails:
/dev/tcp/127.0.0.1/3484 → Operation not permitted
curl http://127.0.0.1:3484/... fails immediately

So the failure mode is:

host shell can use kanban task list
Kanban task agent cannot, because its Codex sandbox blocks network access, including localhost

### Steps to reproduce

Sign into OpenAI via SSO in Cline.

run `npx kanban` in a configured repository.

Open Kanban agent and ask it to add a task for you. The agent cannot interact with the Kanban board.

### Expected behavior

Kanban agent should be able to interact with the kanban board.

### Kanban version

0.1.55

### Environment

node 24.14.1, cline 2.11.0, EndeavourOS (Arch-based)

Start by reproducing the failure with `npx kanban`, then open a Kanban agent in the configured repository and compare it with the host shell's `kanban task list`. Inspect the Codex sandbox boundary and the local runtime at `http://127.0.0.1:3484`; done means the agent can interact with the Kanban board while networking remains disabled.

Written by the indexing model from the issue text.