Add feature to forbid codex to push to git repo or to execute db commands

What variant of Codex are you using?

CLI

What feature would you like to see?

Add command or smth to tune codex permissions in cli:

• Strong disable git push
• Strong disable executing db commands
• Strong disable executing any kubectl commands

Additional information

_No response_