sync: WIN11-BOWEI 2026-09-02 新增 bmem 记忆 skill；imx6-flow/plan-review 文档与脚本更新

远端 pack 服务仍故障（git-upload-pack 返回 0008NAK 后截断），push 待服务器恢复。
未跟踪的 5 个归档临时副本（rtl-ip-replace / sim-rtl-flow / simulink_rtl_dev /
simulink-rtl-redev / zynq-imx6-flow）刻意不入库，待 pull 后由远端提供。

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0135YszNe4pwwJxwaLqKTCKG

langgraph-plan-review/scripts/review_task.py

@@ -121,7 +121,14 @@ def main() -> int:
     os.close(fd)
     last_message_path = Path(last_message_name)
     try:
-        flags = ["--json", "--skip-git-repo-check", "--output-last-message", str(last_message_path)]
+        # read-only sandbox: review needs no writes, and on Windows the
+        # config.toml "elevated" sandbox hangs every shell command when codex
+        # runs outside the ChatGPT app (probed 2026-08-26). Use -c because
+        # "codex exec resume" does not accept the --sandbox flag.
+        # (unquoted value: fails TOML parse -> codex falls back to the raw
+        # string, which survives cmd /c quoting untouched)
+        flags = ["--json", "--skip-git-repo-check", "-c", "sandbox_mode=read-only",
+                 "--output-last-message", str(last_message_path)]
         if codex_session_id:
             command_args = ["cmd", "/c", codex, "exec", "resume"] + flags + [codex_session_id, "-"]
         else: