[REDACTED] object parsing silently strips unknown keys, defeating reject-on-forbidden-field security guards

Codex/OpenAI MCP tool conversion can reject Zod tuple-derived schemas.