Zero-Click Calendar Exfiltration Reveals MCP Security Risk in 11.ai | Hacker News Reader