Codex elicitation requests from MCP use the 'message' field (from ElicitRequest schema), not 'command' or 'cwd'. Update the permission handler to extract and pass this field, and display it as the card subtitle with fallback to command.