Inside AMEX’s agentic commerce stack: How intent contracts and single-use tokens enforce AI transactions