The Attack That Drifts: How Belief Injection Breaks AI Agents Without Touching the Model | Vulnox Blog