EchoLeak (CVE-2025-32711): Zero-Click Prompt Injection, Explained