Bump claude-agent-sdk floor to >=0.2.131 (bundled CLI 2.1.223 security fixes)

[olegbrok]

What

Daily SDK research (2026-08-06): claude-agent-sdk 0.2.131 released, bundling Claude CLI 2.1.223. Our venv has 0.2.129 (bundles CLI 2.1.221); pin is >=0.2.129,<0.3 so this is an install-refresh + floor bump, same shape as #997.

Why

CLI 2.1.222 + 2.1.223 carry security fixes that SDK-transport sessions only get via the bundled CLI:

• 2.1.223: Bash permission bypass (crafted command hiding parts from permission checks), invisible-Unicode/tab padding hiding commands in approval dialogs, workflow-sandbox import() escape, bypassPermissions org-policy gap
• 2.1.222: worktree-isolation gap (destructive git against main checkout), PreToolUse auto-allow hook bypass in background agent tasks

The tmux-transport fleet already runs system CLI 2.1.223 (auto-updated + verified tonight). The remaining SDK-transport agents (persik, ryzhik) ride the bundled CLI, so they're on 2.1.221 until this bump.

Fix

• Bump pyproject.toml floor: claude-agent-sdk>=0.2.131,<0.3
• pip install -U in the daemon venv (use .venv/bin/python -m pip; plain venv pip has been flaky, see fix(admin): fall back from broken venv pip #995)
• Verify with .venv/bin/python -c "import importlib.metadata as m; print(m.version('claude-agent-sdk'))"

🤖 Opened by Barsik