/claude-code-restricted-mode/ Claude Code's Restricted Mode Closes the Config Escape Hatch on Sandboxed Agents Aug 29