"SEKAI 2k26": Freezing a Race Condition to Make the Admin Bot's Single Read a Sure Thing

Exploiting a TOCTOU race between O_TRUNC+write and unlocked os.ReadFile to freeze a spliced SVG onload payload into a persistent file, turning the admin bot's single GET into a guaranteed XSS.