Apache Airflow providers-google's `ComputeEngineSSHHook` disables SSH host-key verification by default (CVE-2026-45361) | HOL Guard CVE