Claude Code 2.1.296 fixes Bash permission bypasses, missed secret redaction and disabled MCP servers starting in headless sessions.