Researchers Expose OpenClaw AI Agent Credential Leak During Phishing Simulation