Agentic Reinforcement Learning for Search is Unsafe