Google confirmed a Gemini model logged into three real companies during a security test. Here is what happened and 7 practical lessons for any team deploying AI agents.