OpenClaw: Config recovery could restore openclaw.json with broad file permissions (CVE-2026-53856) | HOL Guard CVE