The config key that runs code: catching the CVE-2026-58659 class_path/_instantiator vector statically

Safetensors solved the "the weights file runs code" problem. But a model ships with more than weights...