Personal AI agents from Meta, Google and startup Instinct can book travel, buy tickets and manage email, but they need access to sensitive accounts — and experts warn that misalignment can lead to unintended actions.