Build Application Firewall (BAF) vs Kosai CVE-Free Open Source Software (2026)