Stored Clickhouse SQL Injection Through Customer Usage Attribution (CVE-2026-18801) | HOL Guard CVE