Deno: process.loadEnvFile() bypasses env permission checks and mutates process.env with only read access (CVE-2026-49983) | HOL Guard CVE