Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic (CVE-2026-45723) | HOL Guard CVE