List Codex subagents in the review trust inventory

A branch can ship Codex subagents under .codex/agents, which the reviewer loads; they now appear in the warning and --show-config like skills and prompts do. The test covers both the commit tree and disk.