Kimai Docker Vulnerability Exposes Default APP_SECRET, Enabling Account Takeover