Text this: Constraining Host-Level Abuse in Self-Hosted Computer-Use Agents via TEE-Backed Isolation