After many years, migrant workers won legal protection from exploitative agencies – but now an Efta surveillance authority decision puts progress in peril