How API security is evolving for the GenAI era