EUVD-2026-97736

obsidian-tc: Default folder ACL is fail-open; .obsidian plugin secrets are readable by default...