Hijacking Windsurf: How Prompt Injection Leaks Developer Secrets | Not Hacker News!