Root Image Drift vs SOOS Container Security (2026)