Privilege escalation via operator token exfiltration

Privilege escalation in KEDA 2.20.2 and earlier allows remote authenticated users to gain cluster-wide access via Vault authentication. The operator's HashiCorp Vault resolver sends its own projected ServiceAccount token to an unchecked hashiCorpVault.address when Kubernetes authentication has no explicit credential; its JWT-shape filter accepts that token. Namespace permissions to create TriggerAuthentication and ScaledObject resources expose the default configuration, allowing cluster-wide Secret reads and workload or admission changes within the operator's permissions.