GHSA-5gj7-jf77-q2q2: OpenClaw: safeBins static default trusted dirs allow writable-dir binary hijack (`jq`)

In openclaw<=2026.2.23, safe-bin trust in allowlist mode relied on static default trusted directories that included package-manager paths (notably /opt/homebrew/bin and /usr/local/bin). When a same-name binary (for example jq) is placed in one of those trusted default directories, safe-bin evaluation can be satisfied and execute the attacker-controlled binary.