chore: bump codex-review-action pin for fork-review checkout fix (#19)

Pick up the job.workflow_sha fix so fork /codex-review no longer
checks out the caller SHA from codemod/codex-review-action.

Co-authored-by: Alex Bit <alexbit-codemod@users.noreply.github.com>
Co-authored-by: Cursor <cursoragent@cursor.com>

Author: alexbit-codemod

.github/workflows/codex-pr-review.yml

@@ -62,7 +62,7 @@ jobs:
       pull-requests: write
       issues: write
     steps:
-      - uses: codemod/codex-review-action@d49c8fe12fbe11de606f337a662b2d36086c2fa7
+      - uses: codemod/codex-review-action@cab4995d432f77fae403cedd972a77da57f5db49
         with:
           github_token: ${{ github.token }}
           pr_number: ${{ needs.resolve-pr.outputs.pr_number }}

.github/workflows/codex-review-command.yml

@@ -98,7 +98,7 @@ jobs:
       issues: write # Let the composite action upsert its summary comment.
     steps:
       # The sync workflow replaces @main; pin it manually when copying this template elsewhere.
-      - uses: codemod/codex-review-action@d49c8fe12fbe11de606f337a662b2d36086c2fa7 # zizmor: ignore[unpinned-uses] -- sync-action-pins replaces this template ref with a full SHA.
+      - uses: codemod/codex-review-action@cab4995d432f77fae403cedd972a77da57f5db49 # zizmor: ignore[unpinned-uses] -- sync-action-pins replaces this template ref with a full SHA.
         with:
           github_token: ${{ github.token }}
           pr_number: ${{ github.event.issue.number }}
@@ -130,7 +130,7 @@ jobs:
       pull-requests: write # Let only the called workflow's posting job write reviews.
       issues: write # Let only the called workflow's posting job upsert its summary.
     # The sync workflow replaces @main; pin it manually when copying this template elsewhere.
-    uses: codemod/codex-review-action/.github/workflows/fork-review.yml@d49c8fe12fbe11de606f337a662b2d36086c2fa7 # zizmor: ignore[unpinned-uses] -- sync-action-pins replaces this template ref with a full SHA.
+    uses: codemod/codex-review-action/.github/workflows/fork-review.yml@cab4995d432f77fae403cedd972a77da57f5db49 # zizmor: ignore[unpinned-uses] -- sync-action-pins replaces this template ref with a full SHA.
     with:
       pr_number: ${{ github.event.issue.number }}
       codex_model: ${{ vars.AZURE_OPENAI_CODEX_MODEL }}