v1.36.7

This release tightens Codex local-development permissions and includes the latest sync and Windows installer fixes from main.

Highlights

• Fixes Codex git fetch/git push workflows by allowing writes inside the repository .git metadata subtree.
• Cleans up previously generated invalid Codex git permission globs during gentle-ai sync, so users who briefly picked up the bad config are repaired automatically.
• Keeps secret protections intact for .env, local env variants, private keys, PEM files, and secrets/ paths.

Also included

• Resolves persona lookup on the TUI sync path, so sync can use the persisted state correctly.
• Makes the Windows PowerShell installer compatible with irm | iex execution.

Upgrade note

After upgrading, run:

gentle-ai sync --agent codex

Then restart Codex so the updated permission profile is loaded.