GitHub Copilot CLI can be tricked into leaking secrets via encrypted web page instructions news.lavx.hu