Speculative plan can run code on runners and expose cloud credentials. Learn how tokens are abused and how to lock it down ...