HOPZERO Sphere of Trust vs RoonCyber Runtime CNAPP + CADR (2026)