Organizations Struggle to Detect, Contain Out-of-Scope AI Agents