Shadows of regulation: AI use in the EU public sector