Anthropic defends its AI watermarking, reveals limits