NousResearch hermes-agent disabled_toolsets agent_init.py get_tool_definitions privileges assignment (CVE-2026-18976) | HOL Guard CVE