Agentjacking exploits public Sentry DSNs to hijack Claude Code, Cursor, and Codex into running malicious code. 2,388 orgs at risk. How it works and how to stop