Kiro CLI: Local Command Sandbox and Local Autonomous Mode

This release makes the local command sandbox and local autonomous mode available to every V3 user. It also loads MCP tools on demand, extends `KIRO_HOME` across V3 configuration and state, and fixes image, service, MCP, cloud-session, and sign-in issues.

[Contain agent-run shell commands in a sandbox] Run `/sandbox` to place agent shell commands and their child processes inside an operating-system sandbox. Choose whether outbound network access is blocked, limited to common development hosts, or open. You can also run local stdio MCP servers inside the same sandbox.

[Run local tasks in autonomous mode] Run `/autonomous on` in a local V3 session when you want Kiro to work through a task without asking you to approve each shell command. Kiro switches to the Default agent and turns on the local command sandbox first. Learn more ->

[Contain agent-run shell commands in a sandbox] The agent, built-in file tools, and remote MCP servers stay outside the sandbox. Permission rules still govern agent actions. The sandbox reduces risk but cannot guarantee complete isolation, so keep reviewing proposed commands. Learn more ->

[Improvements] On-demand MCP tools: V3 now loads MCP tool definitions only when needed, leaving more of the model context available for your work. Learn more

[Improvements] One V3 home directory: Set `KIRO_HOME` to an absolute path to keep separate Kiro profiles, such as work and personal. V3 stores global configuration, sign-ins, sessions, and agent state there. Existing MCP sign-ins are copied there once. Learn more

[Improvements] Saved sandbox settings in headless runs: A global or project `sandbox.json` with `enabled: true` now applies to V3 headless runs. Add `--sandbox` when the run must stop instead of continuing without protection. Learn more

[Fixes] V3 cloud configuration and Kiro service requests no longer hang when a request stalls; they stop after 15 seconds

[Fixes] V3 MCP tools on streamable HTTP servers keep working after a server drops its session

[Fixes] GitHub and Google sign-ins no longer end when the authentication service returns a temporary error during token refresh

[Fixes] V1 `--no-interactive` runs now exit with the error that ended the turn instead of reporting an unrelated tool approval error

[Fixes] Text in animated WebP images now stays sharp when Kiro reads the first frame in V3 sessions

[Fixes] Kiro now falls back to `~/.kiro` when `KIRO_HOME` is a relative path, a filesystem root, your home directory, or one of its parents

[Fixes] In V3 cloud sessions, the code intelligence indicator and `/code` panel now reflect the cloud workspace