Beyond IGA: Cross-Application Access Risk Analysis with Pathlock