[docs] Revert extra changes from PR 17848 (#18003)

## Summary

1. Revert https://github.com/openai/codex/pull/17848 so the Bazel and
`BUILD` file changes leave `main`.
2. Prepare for a narrower follow up that restores only `SECURITY.md`.

## Validation

1. Reviewed the revert diff against `main`.
2. Ran a clean diff check before push.

codex-rs/app-server/BUILD.bazel

@@ -3,9 +3,6 @@ load("//:defs.bzl", "codex_rust_crate")
 codex_rust_crate(
     name = "app-server",
     crate_name = "codex_app_server",
-    integration_test_tags_extra_by_stem = {
-        "all": ["flaky"],
-    },
     integration_test_timeout = "long",
     test_tags = ["no-sandbox"],
 )

codex-rs/core/BUILD.bazel

@@ -1,4 +1,4 @@
-load("//:defs.bzl", "codex_rust_crate", "workspace_root_test")
+load("//:defs.bzl", "codex_rust_crate")
 
 filegroup(
     name = "model_availability_nux_fixtures",
@@ -31,15 +31,6 @@ codex_rust_crate(
         "//codex-rs/apply-patch:apply_patch_tool_instructions.md",
         "templates/realtime/backend_prompt.md",
     ],
-    integration_test_flaky_by_stem = {
-        "all": [
-            "suite::abort_tasks::interrupt_tool_records_history_entries",
-            "suite::apply_patch_cli::apply_patch_cli_rejects_invalid_hunk_header::applypatchmodeloutput_function_expects",
-        ],
-        "responses_headers": [
-            "responses_stream_includes_turn_metadata_header_for_git_workspace_e2e",
-        ],
-    },
     integration_test_timeout = "long",
     test_data_extra = [
         "config.schema.json",
@@ -57,12 +48,6 @@ codex_rust_crate(
         "//:AGENTS.md",
     ],
     test_tags = ["no-sandbox"],
-    unit_test_args = [
-        "--skip",
-        "guardian::tests::guardian_parallel_reviews_fork_from_last_committed_trunk_history",
-        "--skip",
-        "agent::control::tests::completion_watcher_notifies_parent_when_child_is_missing",
-    ],
     unit_test_timeout = "long",
     extra_binaries = [
         "//codex-rs/linux-sandbox:codex-linux-sandbox",
@@ -72,41 +57,3 @@ codex_rust_crate(
         "//codex-rs/cli:codex",
     ],
 )
-
-workspace_root_test(
-    name = "core-guardian-parallel-reviews-flaky-test",
-    env = {
-        "INSTA_WORKSPACE_ROOT": ".",
-        "INSTA_SNAPSHOT_PATH": "src",
-    },
-    test_bin = ":core-unit-tests-bin",
-    workspace_root_marker = "//codex-rs/utils/cargo-bin:repo_root.marker",
-    args = [
-        "--exact",
-        "guardian::tests::guardian_parallel_reviews_fork_from_last_committed_trunk_history",
-    ],
-    tags = [
-        "flaky",
-        "no-sandbox",
-    ],
-    timeout = "long",
-)
-
-workspace_root_test(
-    name = "core-completion-watcher-missing-child-flaky-test",
-    env = {
-        "INSTA_WORKSPACE_ROOT": ".",
-        "INSTA_SNAPSHOT_PATH": "src",
-    },
-    test_bin = ":core-unit-tests-bin",
-    workspace_root_marker = "//codex-rs/utils/cargo-bin:repo_root.marker",
-    args = [
-        "--exact",
-        "agent::control::tests::completion_watcher_notifies_parent_when_child_is_missing",
-    ],
-    tags = [
-        "flaky",
-        "no-sandbox",
-    ],
-    timeout = "long",
-)

codex-rs/tui/BUILD.bazel

@@ -1,4 +1,4 @@
-load("//:defs.bzl", "MACOS_WEBRTC_RUSTC_LINK_FLAGS", "codex_rust_crate", "workspace_root_test")
+load("//:defs.bzl", "MACOS_WEBRTC_RUSTC_LINK_FLAGS", "codex_rust_crate")
 
 codex_rust_crate(
     name = "tui",
@@ -20,27 +20,8 @@ codex_rust_crate(
         "src/**/snapshots/**",
     ]) + ["//codex-rs/core:model_availability_nux_fixtures"],
     integration_compile_data_extra = ["src/test_backend.rs"],
-    unit_test_args = [
-        "--skip",
-        "app::tests::update_memory_settings_updates_current_thread_memory_mode",
-    ],
     extra_binaries = [
         "//codex-rs/cli:codex",
     ],
     rustc_flags_extra = MACOS_WEBRTC_RUSTC_LINK_FLAGS,
 )
-
-workspace_root_test(
-    name = "tui-update-memory-settings-flaky-test",
-    env = {
-        "INSTA_WORKSPACE_ROOT": ".",
-        "INSTA_SNAPSHOT_PATH": "src",
-    },
-    test_bin = ":tui-unit-tests-bin",
-    workspace_root_marker = "//codex-rs/utils/cargo-bin:repo_root.marker",
-    args = [
-        "--exact",
-        "app::tests::update_memory_settings_updates_current_thread_memory_mode",
-    ],
-    tags = ["flaky"],
-)