GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos