Capsule Runtime Security for AI Agents vs Tolmo (2026)