Developers are finally taking real responsibility for secure code while security teams shift into trusted advisor roles. Here's why it matters.