From Audits to Assurance: The GRC Paradigm Shift of 2026