AI reviewers shipped secret-exfil code because a ticket said "pre-approved"