Claude Code settings files exposed credentials in public GitHub repositories, report saysNov 13, 2026