Hermes Agent creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644) (CVE-2026-53870) | HOL Guard CVE