Confidential Agents for RAG vs OPAQUE for Secure Analytics (2026)