Call the JAR security scanner from a script, CI pipeline, or MCP server — auth, request/response shape, and a working curl example.