@angular/service-worker: Request Credential & Cache Policy Stripping (CVE-2026-50184) | HOL Guard CVE