Serverless, Not Defenseless: Demystifying AWS Fargate Security Challenges