XOXO: Stealthy Cross-Origin Context Poisoning Attacks against AI Coding Assistants