Hijacking Copilot Cowork's AI Gateway to Bypass Sandboxing and Exfiltrate Files