NousResearch hermes-agent server.py shell.exec protection mechanism (CVE-2026-14625) | HOL Guard CVE