https://howtonotcode.com/story/2263-copilot-sdk-adds-spend-caps-and-mcp-oauth-cliapp-tighten-reliability-and-cost-controls