You could just run it in a Docker container and not think about it much after that. Mount a volume to the container with the directory contents you want to be available for edit by the agent.

https://github.com/openai/codex/blob/main/codex-cli/scripts/...