Beyond Quarterly Pentests: On-Demand, Exploit-Validated Security Testing with AWS Security Agent