[Bug]: Hook audits for codex don't block threads

Before submitting

• I searched existing issues and did not find a duplicate.
• I included enough detail to reproduce or investigate the problem.

Area

apps/desktop

Steps to reproduce

1: create a new hook in codex
2: start a thread in t3 chat
3: observe that the thread starts without the hook firing (this is because for new hooks in the codex tui you need to sign off on them in the tui)

Expected behavior

either a workflow to audit the new hooks appears or the hooks are auto approved, or the new thread isn't allowed to run until hooks are approved.

Actual behavior

Thread starts without any of the hooks present.

Impact

Major degradation or frequent failure

Version or commit

main @ 3513fa0

Environment

Ubuntu 24

Logs or stack traces

Screenshots, recordings, or supporting files

No response

Workaround

Manually approve the hooks by sshing in and running codex (in every project, on every machine...) (or make a custom slop commit)

Start in apps/desktop by reproducing the issue: create a Codex hook, then start a thread in t3 chat and observe whether the hook is audited or approved. Trace the hook approval flow and thread-start path; done means a new thread cannot bypass hook approval, or the hooks are automatically approved or audited as specified by the implemented workflow.