Data Theorem Code SAST Secure vs password_compat (2026)