ANSI escape injection in MCP servers: Hidden from humans, visible to AI