[codex] Add plugin id to MCP tool call items (#23737)

Add owning plugin id to MCP tool call items so we can better filter them
at plugin level.

## Summary
- add optional `plugin_id` to MCP tool-call items and legacy begin/end
events
- propagate plugin metadata into emitted core items and app-server v2
`ThreadItem::McpToolCall`
- preserve plugin ids through app-server replay/redaction paths and
regenerate v2 schema fixtures

## Testing
- `just write-app-server-schema`
- `just fmt`
- `just fix -p codex-core`
- `cargo test -p codex-protocol -p codex-app-server-protocol`
- `cargo test -p codex-app-server-protocol`
- `cargo test -p codex-core mcp_tool_call_item_includes_plugin_id --lib`
- `cargo check -p codex-tui --tests`
- `cargo check -p codex-app-server --tests`
- `git diff --check`

## Notes
- `just fix -p codex-core` completed with two non-fatal
`too_many_arguments` warnings on the touched MCP notification helpers.
- A broader `cargo test -p codex-core` run passed core unit tests, then
hit shell/sandbox/snapshot failures in the integration target.
- A broader app-server downstream run hit the existing
`in_process::tests::in_process_start_clamps_zero_channel_capacity` stack
overflow; `cargo test -p codex-exec` also hit the existing sandbox
expectation mismatch in
`thread_lifecycle_params_include_legacy_sandbox_when_no_active_profile`.

codex-rs/app-server/README.md

@@ -1231,7 +1231,7 @@ Today both notifications carry an empty `items` array even when item events were
 - `reasoning` — `{id, summary, content}` where `summary` holds streamed reasoning summaries (applicable for most OpenAI models) and `content` holds raw reasoning blocks (applicable for e.g. open source models).
 - `commandExecution` — `{id, command, cwd, status, commandActions, aggregatedOutput?, exitCode?, durationMs?}` for sandboxed commands; `status` is `inProgress`, `completed`, `failed`, or `declined`.
 - `fileChange` — `{id, changes, status}` describing proposed edits; `changes` list `{path, kind, diff}` and `status` is `inProgress`, `completed`, `failed`, or `declined`.
-- `mcpToolCall` — `{id, server, tool, status, arguments, result?, error?}` describing MCP calls; `status` is `inProgress`, `completed`, or `failed`.
+- `mcpToolCall` — `{id, server, tool, status, arguments, mcpAppResourceUri?, pluginId, result?, error?}` describing MCP calls; `status` is `inProgress`, `completed`, or `failed`.
 - `collabToolCall` — `{id, tool, status, senderThreadId, receiverThreadId?, newThreadId?, prompt?, agentStatus?}` describing collab tool calls (`spawn_agent`, `send_input`, `resume_agent`, `wait`, `close_agent`); `status` is `inProgress`, `completed`, or `failed`.
 - `webSearch` — `{id, query, action?}` for a web search request issued by the agent; `action` mirrors the Responses API web_search action payload (`search`, `open_page`, `find_in_page`) and may be omitted until completion.
 - `imageView` — `{id, path}` emitted when the agent invokes the image viewer tool.

codex-rs/app-server/src/request_processors/thread_resume_redaction.rs

@@ -79,6 +79,7 @@ mod tests {
                 status: McpToolCallStatus::Completed,
                 arguments: serde_json::json!({"secret":"argument"}),
                 mcp_app_resource_uri: Some("ui://widget/lookup.html".to_string()),
+                plugin_id: Some("sample@test".to_string()),
                 result: Some(Box::new(McpToolCallResult {
                     content: vec![serde_json::json!({
                         "type": "text",
@@ -120,6 +121,7 @@ mod tests {
                 status: McpToolCallStatus::Completed,
                 arguments: JsonValue::String(REDACTED_PAYLOAD.to_string()),
                 mcp_app_resource_uri: Some("ui://widget/lookup.html".to_string()),
+                plugin_id: Some("sample@test".to_string()),
                 result: Some(Box::new(redacted_mcp_tool_call_result())),
                 error: None,
                 duration_ms: Some(8),
@@ -136,6 +138,7 @@ mod tests {
             status: McpToolCallStatus::Failed,
             arguments: serde_json::json!({"secret":"argument"}),
             mcp_app_resource_uri: None,
+            plugin_id: None,
             result: None,
             error: Some(McpToolCallError {
                 message: "secret error".to_string(),
@@ -154,6 +157,7 @@ mod tests {
                 status: McpToolCallStatus::Failed,
                 arguments: JsonValue::String(REDACTED_PAYLOAD.to_string()),
                 mcp_app_resource_uri: None,
+                plugin_id: None,
                 result: None,
                 error: Some(McpToolCallError {
                     message: REDACTED_PAYLOAD.to_string(),

codex-rs/app-server/tests/suite/v2/mcp_tool.rs

@@ -513,6 +513,7 @@ url = "{mcp_server_url}/mcp"
         status,
         arguments: json!({ "message": LARGE_RESPONSE_MESSAGE }),
         mcp_app_resource_uri: None,
+        plugin_id: None,
         result: Some(result),
         error: None,
         duration_ms: None,

codex-rs/app-server/tests/suite/v2/thread_resume.rs

@@ -679,6 +679,7 @@ fn append_resume_redaction_history(
                 arguments: Some(json!({"secret":"argument"})),
             },
             mcp_app_resource_uri: Some("ui://widget/lookup.html".to_string()),
+            plugin_id: None,
             duration: Duration::from_millis(8),
             result: Ok(CallToolResult {
                 content: vec![json!({