Gemini 4 Argon has a 0.7% attack success rate on Gray Swan's indirect prompt-injection benchmark