The “Context Poisoning” Crisis: Why Metadata Is the New Security Perimeter