Burly: Secure AI Agent Access to System Operations