[Yaook] OpenStack CVE-2026-22797 Privilege Escalation via Identity Headers in External OAuth2 Tokens