Do Vision-Language Models Leak What They Learn? Adaptive Token-Weighted Model Inversion Attacks