Think Like an Attacker: CI/CD Security in the AI Era