A 0.1% Pretraining Poison Taught a 4B Agent curl | bash. Post-Training Didn't Remove It