Replacing Falco with an embedded eBPF sensor for Kubernetes runtime enforcement