Hidden instructions inside page structure are turning ordinary web content into a quiet control channel for agentic AI systems.