ACE: A Security Architecture for LLM-Integrated App Systems