Google’s $10,000 refund test shows why AI agents need zero trust