Gitea pre-receive hook can miss branch-protection checks after scanner errors (CVE-2026-27780) | HOL Guard CVE