German companies are selling unlicensed surveillance technologies to human rights violators – and making millions