Searching for Privacy Risks in LLM Agents via Simulation