Bot or Not Isn’t Good Enough: Rethinking Bot Protection for the Age of AI Agents