GHSL-2026-152: Privilege escalation via authorization bypass in graphql-ruby

GraphQL::Schema::Resolver#call (used by the Execution::Next Runner) catches GraphQL::UnauthorizedError from a resolver's authorized? hook and incorrectly sets isauthed = true, causing resolve to run and its data to be returned to the client despite the authorization failure. This bypasses the library's documented raise UnauthorizedError authorization pattern for any schema using Execution::Next.