GHSA-fqcm-97m6-w7rm: OpenClaw: Message action attachment hydration bypasses local media root checks when sandboxRoot is unset

sendAttachment and setGroupIcon message actions could hydrate media from local absolute paths when sandboxRoot was unset, bypassing intended local media root checks. This could allow reads of arbitrary host files reachable by the runtime user when an authorized message-action path was triggered.