Claude Code 2.1.167 review: security deny-rule gap flagged with no config workaround

Review of 2.1.166-2.1.167 flags a real gap in permission deny-rule coverage with no configuration workaround, and warns that pinning old versions accumulates security debt.