APX Labs Arsenal (Cipher & Niro) vs jwt-cracker (2026)