Steeltoe's env sanitizer misses connection strings — leaks embedded DB passwords (CVE-2026-50200) | HOL Guard CVE