'Alarming' distress is building in small private credit loans — but software still poses the biggest risk