App requests org-wide actions:write + workflows:write — excessive permissions for code-review tool

The ChatGPT Codex Connector GitHub App requests actions:write and workflows:write at the organization level. For a code-review tool, these are excessive permissions — write access to Actions/Workflows across the entire org is not needed for reviewing code on individual PRs.

Expected: Request repo-scoped write access only, and only during active PR reviews.
Risk: Org-wide workflows:write means the app could theoretically modify CI/CD workflows in any org repo, creating a significant blast radius if the app's credentials are compromised.
Requested: Scope permissions to the minimum required (read on code, write on PR comments/reviews only) and make them repo-scoped rather than org-wide.