Claude Code 2.1.187 adds sandbox credentials setting, org model restrictions

Adds sandbox.credentials setting to block credential theft and org-configured model restrictions with enforcement in model picker. Also includes fixes for structured output, remote MCP tool timeout, and terminal encoding.