fix: add roles: all to smoke-codex workflow (#841)

* fix: add roles: all to smoke-codex to prevent skipping on PRs

The smoke-codex workflow was missing `roles: all` in its frontmatter,
unlike smoke-claude, smoke-copilot, and smoke-chroot. This caused the
compiler to generate a `pre_activation` job with a team membership
check, which failed for users with read-only access (e.g., Claude bot),
skipping the entire workflow on pull_request events.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* chore: recompile smoke-codex with gh-aw v0.43.20

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: Mossaka