An AI agent hack at an Australian gym erased a stranger's booking, raising questions about legal accountability and implications for small businesses.