Claude Code v2.1.187 adds sandbox credential setting and model restrictions

Adds sandbox.credentials setting to block sandboxed commands from reading credential files and secret env vars. Also enforces org-configured model restrictions in the model picker and CLI commands.