MCP06:2025 – Prompt Injection via Contextual Payloads