Banks are blocking third-party AI agents logging into customer accounts. Here is what engineering teams must know about agent security and API boundaries.