Aikido Static Application Security Testing (SAST) vs password_compat (2026)