chore(core): accept bash line-number prefix in seatbelt denial tests

Allow seatbelt stderr assertions to match both bash error formats (with and without the "line 1:" prefix) so codex-core tests pass consistently across shell variants.

Validation: cargo test -p codex-core

Author: ignatremizov

codex-rs/core/src/seatbelt.rs

@@ -497,8 +497,13 @@ mod tests {
     fn assert_seatbelt_denied(stderr: &[u8], path: &Path) {
         let stderr = String::from_utf8_lossy(stderr);
         let expected = format!("bash: {}: Operation not permitted\n", path.display());
+        let expected_with_line_prefix = format!(
+            "bash: line 1: {}: Operation not permitted\n",
+            path.display()
+        );
         assert!(
             stderr == expected
+                || stderr == expected_with_line_prefix
                 || stderr.contains("sandbox-exec: sandbox_apply: Operation not permitted"),
             "unexpected stderr: {stderr}"
         );