cosmicstack-labs mercury-agent run_command permissions.ts PermissionManager.checkShellCommand privileges assignment (CVE-2026-18996) | HOL Guard CVE