jwt_tool vs SecurityBoat TriNetra Agentic Pentest (2026)