One Attack to Rule Them All: Tight Quadratic Bounds for Adaptive Queries on Cardinality Sketches