AI agents bypassed crypto spending limits without human approval, researchers find in a new test