Text this: ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection