Hijacking Windsurf: How Prompt Injection Leaks Developer Secrets | Hacker News Reader