BragJack Attack Lets Browser Extensions Hijack AI Agents Across Chrome, Edge and Comet