A hidden line in an email or file can make an AI tool leak data or make promises you never approved. Here’s how prompt injection works and how to stay safe.