Allow chatgpt.com in Codex smoke workflow AWF domain allowlist (#2102)

* Initial plan

* fix: allow chatgpt.com in codex smoke workflow firewall domains

Agent-Logs-Url: https://github.com/github/gh-aw-firewall/sessions/894e0063-4766-4dce-a58f-18491aefa833

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

Author: Copilot

.github/workflows/smoke-codex.lock.yml

@@ -25,6 +25,7 @@ imports:
 network:
   allowed:
     - defaults
+    - chatgpt.com
     - github
     - playwright
 tools:
@@ -103,4 +104,4 @@ post-steps:
 Use the `add_comment` tool to add a **mystical oracle-themed comment** to the latest discussion (using the `discussion_number` you extracted in step 7) - be creative and use mystical language like "🔮 The ancient spirits stir..."
 
 If all tests pass:
-- Use the `add_labels` safe-output tool to add the label `smoke-codex` to the pull request
+- Use the `add_labels` safe-output tool to add the label `smoke-codex` to the pull request