The Ringer union wins key AI protections in new contract — with one big catch