nebula-mesh: Newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs) (CVE-2026-47768) | HOL Guard CVE