Cursor AI agent deleted a production database and backups in nine seconds, exposing serious flaws in API design and backup isolation