Tacit: Secure AI Agent Operations with Typed Capabilities