macOS.Gaslight | Rust Backdoor Turns Prompt Injection on the Analyst, Not the Sandbox