How do Runtime Application Self-Protection (RASP) tools enhance application security by embedding protection directly into the runtime environment to detect and block attacks like SQL injection and XSS in real time, and what factors such as runtime visibility, performance impact, integration with DevSecOps pipelines, scalability, and cost should organizations consider when selecting the most suitable RASP solution?