Pimzino spec-workflow-mcp approvals.ts ApprovalStorage.createApproval path traversal (CVE-2026-19336) | HOL Guard CVE