config: tune workspace profiles and codex models

.yoi/profiles/_base.lua

@@ -7,7 +7,7 @@ return function(opts)
         slug = opts.slug,
         description = opts.description,
 
-        scope = scope.workspace_write(),
+        scope = opts.scope or scope.workspace_read(),
 
         session = {
             record_event_trace = true,

.yoi/profiles/coder.lua

@@ -1,7 +1,9 @@
 local base = require("_base")
+local scope = require("yoi.scope")
 
 return base {
     slug = "coder",
     description = "Coder role profile: GPT-5.5 with bundled default behavior",
     model_ref = "codex-oauth/gpt-5.5",
+    scope = scope.workspace_write(),
 }