AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code