S00-025: Record blocked task and remediation handoff

Changes: Preserve incomplete work and blocker metadata for S00-025. This checkpoint does not mark implementation accepted.
Validation: Session ended with status blocked.
Blocker: S00-023 harness exited before task execution: codex exec rejected mutually exclusive --approve-for-me and --sandbox flags. Repairing coordinator argv is outside S00-025 storage-only scope.

Task: S00-025
Agent: auto-storage-ae5930b6fbdf
Role: storage
Action: claim
Status: blocked

Task title: Устранить прерывание: Устранить прерывание: Выбрать IndexedDB wrapper и migration policy

planning/tasks.json

@@ -1398,7 +1398,8 @@
       "title": "Устранить прерывание: Устранить прерывание: Выбрать IndexedDB wrapper и migration policy",
       "outcome": "Устранить одну указанную причину прерывания и доказать готовность исходной задачи к новому запуску; не выполнять соседние задачи.",
       "depends_on": [
-        "S00-002"
+        "S00-002",
+        "S00-028"
       ],
       "requirements": [],
       "scope": [
@@ -1544,6 +1545,58 @@
       ],
       "context_budget_chars": 48000
     },
+    {
+      "id": "S00-028",
+      "stage": "S00",
+      "kind": "blocker",
+      "root_task": "S00-005",
+      "blocker_depth": 3,
+      "unblocks": [
+        "S00-025"
+      ],
+      "role": "ci-cd",
+      "reviewer_role": "qa",
+      "title": "Repair conflicting Codex harness sandbox arguments",
+      "outcome": "A reviewed compatible runner argv starts a fresh harness with project write sandbox without the mutually exclusive argument error.",
+      "depends_on": [
+        "S00-002"
+      ],
+      "requirements": [],
+      "scope": [
+        "runner.local.json",
+        "runner.example.json",
+        "docs/AUTOMATION.md"
+      ],
+      "inputs": [
+        "docs/WEB_PROFILE.md",
+        "docs/ARCHITECTURE.md",
+        "docs/CONTRACTS.md",
+        "docs/TESTING.md",
+        "roles/storage.md",
+        "docs/decisions/README.md",
+        "state/blockers/S00-023.md",
+        "state/blockers/S00-025.md",
+        "state/blockers/S00-028.md"
+      ],
+      "spec_sections": [],
+      "ui_sections": [],
+      "steps": [
+        "Inspect the recorded CLI usage error and configured argv without logging secrets",
+        "Obtain coordinator input for the active runner configuration and preserve project-only sandbox",
+        "Correct only conflicting launcher arguments and document the supported invocation",
+        "Validate argument compatibility with a bounded non-product smoke check and submit for independent review"
+      ],
+      "acceptance": [
+        "The conflicting approval/sandbox combination is removed from the active launcher",
+        "Project write sandbox remains enforced",
+        "No original storage task is marked complete or executed during launcher repair"
+      ],
+      "checks": [
+        "Inspect codex exec help and the selected argument combination",
+        "Run a bounded launcher smoke check without resuming a conversation or selecting product work"
+      ],
+      "context_budget_chars": 48000
+    },
     {
       "id": "S00-010",
       "stage": "S00",