AWS tuftool

• CVE-2026-6968 Medium 5.9 Multiple Path Traversal Variants in awslabs/tough 0.5%
• CVE-2026-6967 Medium 5.9 Missing Delegated Metadata Validation in awslabs/tough 0.3%
• CVE-2026-6966 Medium 5.3 Signature Threshold Bypass in awslabs/tough Delegated Roles 0.3%