[BREAKING] Claude Code 2.1.222: worktree isolation escape fixed, ultraplan removed

Fixes two containment holes: worktree-isolated sessions and their subagents could run destructive git commands against the main checkout, and PreToolUse auto-allow hooks bypassed tool restrictions in background agent tasks. The ultraplan feature is removed, and repo-local settings can no longer enable Remote Control.

Tool: claude-code · Version: 2.1.222 · Significance: 4/5 · BREAKING CHANGE · security, fix, breaking, deprecation