pgAdmin 4: HTML injection in cloud verify_credentials / deploy endpoints via unsanitised SDK exception text (CVE-2026-12047) | HOL Guard CVE