EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System