Agent and MCP Security: Tool Poisoning, Rug Pulls, and Tool Shadowing