Gateway policy files gain a code block for Claude Desktop's Code tab

What

The Claude apps gateway is a self-hosted server that hands out managed settings, which are settings an administrator sets for users. Its policy files and their checks changed.

• Policy entries accept a new code block, which applies to Claude Desktop's Code tab. Per this change, the Code tab needs Claude Code v2.1.296 or later.
• A policy that mixes code with cli or settings blocks is rejected. The error tells the author to put all settings into the one code block ("Choose cli or code").
• A new warning says code: blocks reach the Code tab only when the machine's own managed settings name the gateway and reach it over HTTPS on a private network.
• serve_to_desktop: false is ignored in a file that has a code: block.
• The old warning that no policy sets serve_to_desktop, which meant the Code tab got a 404 from /managed/settings, is replaced. The new warning says settings outside a code: block do not reach the Code tab, even with serve_to_desktop: true.
• The no-policy message now names the fix: set serve_to_desktop: true on the user's policy, or change cli to code in every policy. Before, it only said to check serve_to_desktop.
• Validation errors for a policy using code now point at .code instead of .cli.

Separately, signing out now waits for an extra cleanup step to finish before it clears your sign-in details.

Why

Gateway admins who serve settings to Claude Desktop need to move those settings under a code: block, and keep each policy to either cli or code. Otherwise the Code tab gets no settings. The messages now say exactly what to change.