As companies deploy incognito shoppers to monitor staff, the line between quality control and worker surveillance is growing dangerously thin.