MobileWorldSafety: Benchmarking GUI Agent Safety Against Environmental Injection Attacks in Android Apps