shopper/framework: Race condition on Discount.usage_limit allows silent over-redemption (CVE-2026-47741) | HOL Guard CVE