nextlevelbuilder GoClaw invoke Endpoint create_video_byteplus.go bytePlusDownloadVideo server-side request forgery (CVE-2026-15624) | HOL Guard CVE