ICE authorised HSI to use commercial spyware capable of zero-click phone compromises, while Congress probes its $2m Paragon contract.