Improper path handling in Kustomization files allows for denial of service in github.com/fluxcd/flux2