Breaking Down CVE-2026-25049: How TypeScript Types Failed n8n's Security