Coolify: Cross-tenant activity log disclosure via unlocked Livewire property in ActivityMonitor (CVE-2026-34167) | HOL Guard CVE