CHW-5927 APIKeyRotateFailed

rotate failed

Default message: rotate failed
HTTP status: 500 (server)

Problem. DB update for a rotated secret failed (hash + prefix replacement). Cause. Transient DB failure during the multi-column write. Fix. Retry; if the rotated secret was already returned to the caller but the persist failed, the rotate is safe to retry — the stored hash will be updated with the latest secret on success. HTTP 500.