GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion (CVE-2026-48529) | HOL Guard CVE