Prometheus Azure AD remote write OAuth client secret exposed via config API (CVE-2026-42151) | HOL Guard CVE