GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitor (CVE-2026-45033) | HOL Guard CVE