Amazon's AI agent Kiro inherited an engineer's elevated permissions, bypassed two-person approval, and deleted a live AWS production environment