Third-party AI agents are knocking on the doors of customer bank accounts just as regulators begin using AI to scrutinise the banks themselves. That leaves lenders with a hard problem.