Claude Code v2.1.187 adds sandbox credential protection

Adds sandbox.credentials setting to block secret access. Also enforces org-configured model restrictions in the model picker and CLI.