Claude Code v2.1.187 adds sandbox credential blocking

Release adds sandbox.credentials setting to block commands from reading credential files. Org-configured model restrictions now apply to model picker, --model, /model, and ANTHROPIC_MODEL.