Researchers bypassed Microsoft Copilot's restrictions by repeatedly asking the chatbot why auto-execution was impossible, prompting it to reveal an undocumented parameter