nearai ironclaw shell.rs classify_command_risk command injection (CVE-2026-18980) | HOL Guard CVE