Governing dual-use technologies: Case studies of international security agreements and lessons for AI governance