Vibe coding upstart Lovable denies data leak, cites 'intentional behavior,' then throws HackerOne under the bus