Claude Code adds sandbox credentials and model restrictions

New sandbox.credentials setting blocks credential reading. Org-configured model restrictions show in model picker. Mouse click support for select menus in fullscreen mode.