Gatecmd: Secure Host Command Execution for AI Agents in VMs