Improving Black-box Robustness with In-Context Rewriting