JSFuck in Your Inbox: How an Old JS Obfuscation Trick Beat an AI Agent's Guardrails