Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges