v0.157.76

• Give each sandbox tier's container Claude Code's managed settings, apps.claude.managedSettings, in its own /etc and never the host's: by default allowManagedPermissionRulesOnly, so a project's checked-in deny list -- which blocks even in bypassPermissions mode -- and every other file's permission rules are ignored and the container is the only boundary, and permissions.defaultMode auto, Shift+Tab still cycling; each key a default of its own, so a tier can change one, add others or mkForce none (ca0a88b)