Contract-Driven API Security Testing In CI