A multi-tenant authentication gap in Microsoft’s AI operations agent exposed live command streams, internal reasoning, and ...