Root Image Drift vs Sysdig Container and Kubernetes Security (2026)