Operant AI API Threat Protection vs Semgrep Code (2026)