bug: Upgrade Codex in the base sandbox image; pinned `0.117.0` breaks current Codex cloud requirements

[kirit93]

The OpenShell Community base sandbox currently pins @openai/codex@0.117.0. That older Codex CLI fails after ChatGPT device-code login when it receives newer cloud requirements containing the browser_use feature requirement.

This makes Codex unusable in the OpenShell sandbox even though authentication succeeds.

Current Behavior

After running Codex in an OpenShell sandbox and signing in with device code, Codex exits with:

Error loading configuration: invalid `features` requirement `browser_use` from cloud requirements