Obsidian Security - SaaS Pre-Exfiltration vs Raven Runtime ADR (2026)