Prompt Injection Remains the Dominant Failure Mode as Agent Frameworks Absorb Supply-Chain Attacks · Polylog