Your WAF Can’t Read: Prompt Injection and the Limits of Pattern-Matching Security | buildrs