World's new Agent Kit extends Coinbase's x402 flow so websites can check whether AI agents are backed by real humans, reviving privacy concerns around iris-linked onboarding.