Critical Claude Code Flaw Ignores User-Defined Security Rules