Rotate a key's secret.
The server generates the new secret and returns it in key; this is the only
time it is shown. The old secret stops working immediately on this replica and
within 5 seconds elsewhere, so anything still using it starts failing as soon
as you rotate. The key’s id, name and permissions are unchanged. Revoked keys
cannot be rotated, and keys seeded from configuration are protected.
Authorizations
A scoped AgentEye API key. Mint one in the dashboard under Settings → API keys, or with POST /v1/keys. Each endpoint names the permission it requires; a key without it gets 403 and a required_permission field naming what was missing.
Path Parameters
The key's id, as returned by GET /keys.
Response
The new secret, in key — shown once and not recoverable.

