Claude Code 2.1.153 review: OAuth routing and subagent MCP policy tightened

2.1.153 fixes a regression where custom API gateways could receive the user's OAuth credential instead of the gateway token, enforces managed MCP policies on subagent frontmatter servers, and makes /model persist as.