Prefab UI's Python Sandbox Could Read and Write Your Server's Files. Upgrade to 0.21

CVE-2026-120338, CVSS 10.0: Prefab UI ran model-written Python with unrestricted Deno file and network access via FastMCP's GenerativeUI. Check and fix.