AWS Kiro RCE: Prompt Injection to Code Execution

Corroborating researcher write-up: mcp.json as executable trust boundary; hidden white one-pixel HTML text; human only approved URL fetch. Platform-level protected paths required after patch.