The Agent in the Middle: How AI-Mediated Access Reshapes Web Vulnerability Exploitation