fix: --verbose flag, rw credential mounts, correct MCP config schema

- Add --verbose (required for --output-format stream-json)
- Fix --mcp-config value: {"mcpServers":{}} (schema rejects plain {})
- Add --strict-mcp-config to prevent any MCP server from loading
- .claude dir and .claude.json mounted rw so CLI can refresh OAuth token

server.py

@@ -121,8 +121,11 @@ def _build_command(model: str, system_prompt: Optional[str]) -> list[str]:
         "--print",
         "--output-format", "stream-json",
         "--input-format", "stream-json",
+        "--verbose",
         "--include-partial-messages",
         "--no-session-persistence",
+        "--mcp-config", "{\"mcpServers\":{}}",
+        "--strict-mcp-config",
         "--tools", "",
         "--model", model,
     ]