esphome device-builder

• CVE-2026-59177 High 8.8 ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces 1.2%
• CVE-2026-59178 Critical 9.8 ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade 0.8%