Claude Code 2.1.143 review: hook block cap and credentials corruption fix

Across 2.1.139-2.1.143: stop-hook blocks are capped at 8, corrupt credentials.json files are handled safely, MCP_TOOL_TIMEOUT is respected, and compaction preserves sensitive user instructions.