Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass (CVE-2026-49998) | HOL Guard CVE