Feature: Allow password-less sudo when running codex in docker container

While there is some risk to allowing sudo to a resident of a docker container it is pretty limited. The advantage would be that agent could install tools that it is missing into the local container when asked. Combine that with a feature to allow persisting container between executions and the recently added change that has one container name per workspace, and an AI could customize its containerized running environment to suit its purposes. I think that would be pretty rad.

Proposal

Add a --allow-sudo flag to run_in_container.sh