Why

This regressed in #19063, which made GuardianApproval stable and enabled by default. That adds an enabled Auto-review row to the permissions popup, but approvals_popup_navigation_skips_disabled still assumed the disabled Full Access row lived behind a hard-coded numeric shortcut, so the test started selecting a different row and closing the popup instead of verifying disabled-row behavior.

What

• disable GuardianApproval in approvals_popup_navigation_skips_disabled so the popup layout matches the scenario the test is exercising
• choose the hidden numeric shortcut for the disabled Full Access row by platform (2 on non-Windows, 3 on Windows where Read Only is shown) before asserting that selecting the disabled row leaves the popup open

Testing

• cargo test -p codex-tui --lib chatwidget::tests::permissions::approvals_popup_navigation_skips_disabled -- --exact --nocapture
• cargo test -p codex-tui --lib chatwidget::tests::permissions -- --nocapture
• cargo test -p codex-tui