MCP Server Kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration (CVE-2026-47250) | HOL Guard CVE