Utility Under Attack: Agent Memory Poisoning and the Limits of Content Screening and Provenance Ranking