Capsule Runtime Security for AI Agents vs Invariant Labs (2026)