Operations

Key rotation

Rotate credentials with a mint-then-revoke order. Keep signing secrets and service callers in sync.

• API keys: mint replacement, deploy, then revoke the old key.
• Webhook secrets: rotate, update verifier, send a test delivery.
• NTKA service secrets: update NTKA and API/worker callers together.
• Owner authority remains owner-controlled.