CVE-2026-44428: MCP Registry's GitHub OIDC tokens are replayable across registry deployments due to shared audience

An attacker-controlled or compromised registry deployment can mint a valid registry JWT on another deployment and inherit publish permissions for the victim GitHub owner namespace. In practical terms, this enables unauthorized publication or update actions for names such as io.github.<owner>/* on the victim registry instance.