The city of Boston spent $650,000 to test surveillance software during last year’s Boston Calling music festival, using the technology to record the crowds of concertgoers without their knowledge.