kept Claude launched with `--setting-sources project,local` and `--strict-mcp-config`. Tension: Global Claude plugins were also leaking until user settings were excluded. Outcome: user settings were excluded.

250eb47c-1ca6-4c97-a43b-5bccaa110a53