What Real LLM Monitoring Looks Like (and Why It's Hard)