AI-Powered Bug Hunt: How Microsoft Used Copilot to Discover Critical Vulnerabilities in GRUB2