Bank regulators’ heightened scrutiny of AI highlights third-party risk