Merchants are quietly banning AI agents that don't identify themselves — here's what's actually happening