Securing APIs in the Age of Agentic AI