Remote Prompt Injection in GitLab Duo Leads to Source Code Theft