A Malicious GitHub Issue Could Turn Google’s AI Agent Against Its Own CI/CD Pipeline