Windmill: Resource-scoped API tokens can read script contents outside their allowed path via scripts/list_search