Why Kernel-Level eBPF Is Replacing User-Space Agents for Security Observability