v0.147.0: Command blocklist, MCP OAuth improvements, and welcome screen sign-in

New features

- Command blocklist - The new commandBlocklist setting hard-stops specified commands so they can never run, even under full autonomy or skipped approvals
- Welcome screen sign-in - Added log-in and sign-up CTAs to the welcome screen (app)

Improvements

- MCP OAuth - MCP servers can now authenticate using Client ID Metadata Documents (CIMD), with improved compatibility for servers that require a resource indicator
- Updated tooltips - Refreshed tooltips for clearer guidance

Bug fixes

- Ctrl+Enter tooltip - Fixed the Ctrl+Enter tooltip
- Desktop MCP OAuth banner - The MCP OAuth banner now points at the MCP button (app)