fix(permissions): coerce hidden shell argv before authorize

Authorize classified Codex command arrays as empty strings, so
reactor-gated hidden shell auto-allowed and the unwrapped script ran.

Author: TheGreatAxios