Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents