CVE-2025-67635: Unauthenticated DoS in the Jenkins CLI full-duplex endpoint

[Race conditions](https://db.fluidattacks.com/wek/124/) and missing timeouts in Jenkins' plain CLI endpoint let anyone exhaust servlet threads without Overall/Read.