AWS Bedrock AgentCore Sandbox Bypass Allows Covert C2 Channels and Data Exfiltration