Secret Rotation Is a Migration: A Zero-Downtime Credential Contract Nov 3, 2026 Rotate database credentials, signing keys, and encryption keys safely with versioned secrets, dual-read migration, atomic reload, and verified revocation.