Worktree isolation strengthened; hook bypass fixed
Fixed a security issue where worktree-isolated sessions could run destructive git commands against the main checkout, and another where PreToolUse auto-allow hooks could be bypassed in background agent tasks; isolation now applies to file edits and Bash in every session type. Also fixed a startup connectivity check that hung behind HTTPS proxies and a usage-credits block for Team/Enterprise members with dismissed requests, plus a range of other fixes across MCP attribution, Pull Request linking, and screen-reader mode.

