Which sunscreens work, which fall short—and why you can’t always rely on packaging labels