flat-to-nested: Prototype pollution in flat-to-nested convert() via __proto__ parent/id key (CVE-2026-55091) | HOL Guard CVE