Update codex to 0.136.0

[acp-release-bot]

What's new

Finalized the Codex update compatibility work.

Previously failed tests:

• should fail on wrong sessionId: expected invalid thread id, but Codex now returns invalid session id.
• should send attachments as prompt items: snapshot expected perCwdExtraUserRoots inside skills/list, but Codex now uses skills/extraRoots/set.

Changed:

• Moved extra skill roots handling to skills/extraRoots/set, then refreshes via skills/list.
• Normalized Codex serviceTier strings to ACP-supported tiers.
• Added explicit no-op handling for new process/thread settings notifications.
• Updated test fixtures for new required fields: service tiers, turn itemsView, item timestamps, thread sessionId/threadSource, MCP pluginId, user message clientId, and MCP server serverInfo.
• Updated the affected snapshot and wrong-session assertion to match current Codex behavior.