From Prompt to Plant Shutdown: Agent Context Contamination in MCP