Semgrep says GLM 5.2 beat Claude in a narrow security benchmark (Web Pulse, 2026)