ntfs: centalize $INDEX_ROOT header validation (CVE-2026-72204) | HOL Guard CVE