chore(ci): run Codex security review on gpt-6.1-sol (#8228)

🤖 Switches the Codex security review from `gpt-5.6-sol` to
`gpt-6.1-sol`. Reasoning effort stays at `high`.

- `CODEX_MODEL` changes in both the review job and the job that posts
the comment, so the comment's `Model:` line stays accurate.
- `codex-version` goes from `0.150.1` to `0.161.0`. That's the first
Codex CLI release with GPT-6.1 Sol in its bundled model catalog
([openai/codex#49318](https://github.com/openai/codex/pull/49318)). Both
`@openai/codex` and `@openai/codex-responses-api-proxy` are published at
that version.
- `gpt-6.1-sol` is the model ID listed on the [OpenAI models
page](https://developers.openai.com/api/docs/models/gpt-6.1-sol). It
supports `high` effort through the Responses API.

The workflow runs on `pull_request_target`, so it uses the copy on the
base branch. This PR's own review still runs the old model, and the new
one takes effect on the first review after merge.

Signed-off-by: Will Pfleger <pfleger.will@gmail.com>
Co-authored-by: Paul <4a1bfa0013bc6d14a8d600d8bf6392efefbd2a26ac3c96c9b2a106b0d12297ca@buzz.block.builderlab.xyz>

.github/workflows/codex-security-review.yml

@@ -220,7 +220,7 @@ jobs:
     permissions:
       contents: read
     env:
-      CODEX_MODEL: gpt-5.6-sol
+      CODEX_MODEL: gpt-6.1-sol
       CODEX_REASONING_EFFORT: high
       CODEX_REVIEW_API_KEY_PRESENT: ${{ secrets.CODEX_REVIEW_API_KEY != '' }}
       REVIEW_CONTEXT: review-context
@@ -303,7 +303,7 @@ jobs:
           ACTIONS_ID_TOKEN_REQUEST_URL: ''
         with:
           openai-api-key: ${{ secrets.CODEX_REVIEW_API_KEY }}
-          codex-version: '0.150.1'
+          codex-version: '0.161.0'
           model: ${{ env.CODEX_MODEL }}
           codex-args: '["-c","model_reasoning_effort=${{ env.CODEX_REASONING_EFFORT }}"]'
           # The trusted authorization job already required repo write access for the
@@ -508,7 +508,7 @@ jobs:
       contents: read
       pull-requests: write
     env:
-      CODEX_MODEL: gpt-5.6-sol
+      CODEX_MODEL: gpt-6.1-sol
       REVIEW_JSON: ${{ needs.security-review.outputs.review_json }}
       REVIEW_PR_NUMBER: ${{ needs.prepare-review.outputs.pr_number }}
       REVIEW_TRIGGER_ACTOR: ${{ needs.prepare-review.outputs.trigger_actor }}