- Add readClaudeKeychainCredentials() to read from macOS keychain using security CLI - Fall back to keychain when legacy credential files don't exist - Support both subscriptionType and rateLimitTier for plan detection - Add comprehensive tests for keychain credential reading - Add changeset for patch release