Securing AI Agents with Information-Flow Control