‘Ghostjacking’ Attack Uses Poisoned Logs to Turn AI Agents Bad