AgentDojo: A Dynamic Environment to Evaluate Attacks and Defenses for LLM Agents