EnergizeLab NestJS auth service

• CVE-2026-105040 High 8.8 EnergizeLab Eilik User-ID Mass Assignment Account Takeover 0.3%
• CVE-2026-105034 High 8.2 EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial Numbers 0.6%