Agentic Development Security vs SAST Auto-Fix (2026)