Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit (CVE-2026-53716) | HOL Guard CVE