A new anti-bot standard could let websites verify traffic without CAPTCHAs or tracking cookies, easing checkout friction for shoppers.