Coder vulnerable to OIDC account takeover via email-based user matching and email_verified bypass (CVE-2026-55075) | HOL Guard CVE