Check Point CloudGuard Spectral vs Heeler Runtime, Fixability-First SCA (2026)