Brekeke SIP Server: Unauthenticated Nashorn JS Engine RCE

The unauthenticated ProvisioningTest bean passes a user-controlled script parameter directly to Nashorn ScriptEngine.eval() with no sandbox. Because Nashorn permits Java type references, a single request runs java.lang.Runtime.exec() and echoes the output — unauthenticated RCE as tomcat.