feat(core) request_permissions always allow

codex-rs/app-server-protocol/schema/json/codex_app_server_protocol.schemas.json

@@ -3244,7 +3244,8 @@
     "PermissionGrantScope": {
       "enum": [
         "turn",
-        "session"
+        "session",
+        "alwaysAllow"
       ],
       "type": "string"
     },
@@ -3381,6 +3382,13 @@
           ],
           "type": "string"
         },
+        {
+          "description": "User has approved this permissions request for the current session and wants the granted subset persisted for future sessions.",
+          "enum": [
+            "approved_for_always"
+          ],
+          "type": "string"
+        },
         {
           "additionalProperties": false,
           "description": "User chose to persist a network policy rule (allow/deny) for future requests to the same host.",