Golf MCP Control Plane vs Parameter Pentesting (2026)