BragJack Attack Hijacks AI Assistants in 5 Popular Browsers With Zero Clicks