API Discovery & Security: Reference Architecture