Heimdall: Secure Autonomous Agent Access to MCP Servers