Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDK (CVE-2026-15737) | HOL Guard CVE