ONE World Meta Promised Muse Was Safe. Then a Single Prompt Revealed the Dirty Secret in Its Training Data.