Claude Code 2.1.187 review: sandbox credential protection setting added

2.1.187 adds sandbox.credentials to block sandboxed commands from reading secrets, org-configured model restrictions across pickers and env vars, a 5-minute idle abort for hung remote MCP calls, and worktree cleanup.