GHSA-cfxv-8fw8-rwpv: praisonaiagents: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool | AI Sec Watch