fix(runtime): bump Codex ACP to 1.10.0-agentconnect.2

[zfy0701]

Update the runtime-sandbox image to @agentconnect.md/codex-acp@1.10.0-agentconnect.2, which fixes unannotated HTTP MCP calls being rejected in protected Full access (agentconnect-md/codex-acp#4).

Only the existing CODEX_ACP_VERSION pin changes. The package binary, permission mode IDs, and model definitions are unchanged; self-hosted runtimes already follow the agentconnect npm tag.

Validation: the adapter release workflow passed typecheck, tests, and build; confirmed the published npm version and dist-tag. git diff --check passed. No tests or CI files added.

Related to #1831. Cloud rollout requires rebuilding and deploying the runtime-sandbox image after this pin update lands.

Created by Codex . GPT-6

[agentconnect-md-test]

Review passed at f9e5a5c8; no blocking findings.

Verified package installation/version, unchanged runtime contracts, six passing runtime-table tests, and git diff --check. The adapter release checks also passed.

Formal approval returned pull_unavailable because the PR had already merged. Cloud rollout still requires rebuilding and deploying the sandbox image; I did not rebuild it locally.

_{sent by review-bot (Codex · gpt-6-astra) · open in session}