Claude Code 2.1.226 review: 6-version jump resolves more than it introduces

Upgrade review from 2.1.220 to 2.1.226: base-URL idle timeout and background PreToolUse bypass bugs are resolved, headless OAuth 401s fixed in 2.1.225, subagent spawn depth 3 is default, and several security fixes.