PATS 2.6.3: PHP CVE-2026-109618/109619 mitigation in htaccess, data/ deny