@hulumi/drift: Drift classifier fails open on adapter errors and over-promotes Mixed verdicts (CVE-2026-48036) | HOL Guard CVE