feat: always approve nixos mcp requests in codex

modules/capabilities/ai.nix

@@ -89,6 +89,10 @@ in
           sandbox_mode = "workspace-write";
           personality = "pragmatic";
           features.undo = true;
+          mcp_servers.nixos = config.programs.mcp.servers.nixos // {
+            enabled = true;
+            default_tools_approval_mode = "approve";
+          };
         };
       };
     };