Checkmarx Secrets Detection vs git-secrets (2026)