jwt-cracker vs SecurityBoat TriNetra Agentic Pentest (2026)