A2AS: Agentic AI Runtime Security and Self-Defense