Propagate client config to queries. Fixes CVE-2025-0914

Prevents overriding the client config to bypass prevent_execve.

Author: djoreilly

actions/vql.go

@@ -147,6 +147,7 @@ func (self VQLClientAction) StartQuery(
 
 	builder := services.ScopeBuilder{
 		Config: &config_proto.Config{
+			Client:		config_obj.Client,
 			Remappings: config_obj.Remappings,
 		},
 		// Only provide the client config since we are running in