Claude Code v2.1.187 adds sandbox.credentials setting, model restrictions

Adds sandbox.credentials setting to block sandboxed commands from reading credential files and secret env vars. Also enforces org-configured model restrictions in the model picker and via --model.