CVE-2026-33177: Statamic is missing authorization check on taxonomy term creation via fieldtype

Low-privileged Control Panel users could create taxonomy terms by submitting requests to the field action processing endpoint with attacker-controlled field definitions. This bypasses the authorization checks enforced on the standard taxonomy term creation endpoint.