How would you design a secure, scalable microservices API with Spring Boot, REST APIs, and distributed tracing?