Addresses Codex review on PR #948: the sandbox/permission-failure path needs a
blocking user decision before touching the current checkout, but it only said
'ask the user' — which can degrade to a non-blocking chat prompt or skipped
confirmation on some harnesses. Name the platform blocking-question tools
(AskUserQuestion / request_user_input / ask_user) with the ToolSearch load note
and a numbered-chat fallback, per AGENTS.md > Cross-Platform User Interaction.
Adds a guard.