Three Fronts of AI Poisoning: Breaking Down the Attack-Defense Game in RAG Retrieval