Ruby CSS Parser: SSRF and Local File Disclosure in `CssParser::Parser#read_remote_file` (CVE-2026-53727) | HOL Guard CVE