A practical checklist for the Azure DevOps MCP flaw that lets hidden PR comments hijack AI coding agents, plus the ...