Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection