First Documented In-the-Wild Attack: LLM Agent Autonomously Pivots from Marimo RCE to Internal Database in Four Steps