Frontier Models are Capable of In-context Scheming