Host privilege escalation via unrestricted cross-node dependencies

Incorrect authorization in BlueChi before 1.0.0 allows local users with managed-node root to execute host services via cross-node dependencies. The proxy-service path accepts systemd dependencies from every managed node without checking a per-node authorization allowlist. Exploitation requires root on a managed node and can create or replace host-affecting unit files, enabling unauthorized host service execution and privilege escalation.