CHW-4927 APIKeyInactive

api key is not active; rotate is only permitted on active keys

Default message: api key is not active; rotate is only permitted on active keys
HTTP status: 409 (client)

Problem. Rotate was called against a key whose Active(time.Now()) check returned non-nil (revoked or expired). Cause. The key has been revoked, or its TTL has elapsed. Fix. Mint a new key — rotate is only permitted on active keys. The structured error.fields context names whether the underlying state was revoked or expired. HTTP 409.