Coldcard Mark 3 hardware wallets experienced an entropy generation vulnerability affecting devices configured without a passphrase