APX Labs Arsenal (Cipher & Niro) vs jwt-hack (2026)