GhostApproval & GitLost: Why Agentic Coding Is Breakable by Design