MELON: Indirect Prompt Injection Defense via Masked Re-execution and Tool Comparison