Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls (CVE-2026-54760) | HOL Guard CVE