Test LLM apps for OWASP LLM04:2026 supply chain risks in models, dependencies, licenses, and CI/CD pipelines