Mind the SaaS Security Gap: Moving from Visibility to Observability