CyberPanel's hard-coded JWT secret grants an unauthenticated root shell