turso-cli persists Turso platform JWT with world-readable (0o644) file permissions (CVE-2026-48790) | HOL Guard CVE