Claude Code's sandbox.denyRead doesn't stop the Read tool
claudecodecamp.com