Preserve plugin attribution across command approvals (#35029)

## What changed

- Add optional `plugin_id` and `script_path` fields to execution approval and guardian assessment events.
- Propagate validated plugin attribution through delegated approvals, guardian-reviewed command items, app-server notifications, thread history, and rollout traces.
- Preserve attribution on both started and completed command items, including declined commands.

## Testing

- Extend core, app-server, thread-history, and rollout-trace tests to cover plugin attribution propagation and serialization.

GitOrigin-RevId: 723684d010cab04142918d7a95e06ed95d008da1

codex-rs/core/src/tools/network_approval.rs

@@ -687,6 +687,7 @@ impl NetworkApprovalService {
                     /*proposed_execpolicy_amendment*/ None,
                     /*additional_permissions*/ None,
                     available_decisions,
+                    /*plugin_attribution_override*/ None,
                 )
                 .await
         };

codex-rs/core/src/tools/runtimes/shell.rs

@@ -170,6 +170,7 @@ impl Approvable<ShellRequest> for ShellRuntime {
                             .cloned(),
                         req.additional_permissions.clone(),
                         available_decisions,
+                        /*plugin_attribution_override*/ None,
                     )
                     .await
             })

codex-rs/core/src/tools/runtimes/shell/unix_escalation.rs

@@ -507,6 +507,7 @@ impl CoreShellActionProvider {
                         /*proposed_execpolicy_amendment*/ None,
                         additional_permissions,
                         Some(vec![ReviewDecision::Approved, ReviewDecision::Abort]),
+                        /*plugin_attribution_override*/ None,
                     )
                     .await
             })

codex-rs/core/src/tools/runtimes/unified_exec.rs

@@ -209,6 +209,7 @@ impl Approvable<UnifiedExecRequest> for UnifiedExecRuntime<'_> {
                             .cloned(),
                         req.additional_permissions.clone(),
                         available_decisions,
+                        /*plugin_attribution_override*/ None,
                     )
                     .await
             })