Changes to Mint a fresh secret in place (same id, budgets, usage). The new secret is shown once; the old stops resolving. Honors an `Idempotency-Key` header (per-principal, op+id-scoped, ~10min replay)

the response property allowed_pools became nullable for the status 200

the response property secret became nullable for the status 200

the response property secret became optional for the status 200

removed the required property budget_period from the response with the 200 status

removed the required property max_budget_cents from the response with the 200 status

removed the required property rpm_limit from the response with the 200 status

removed the required property tpm_limit from the response with the 200 status

api operation id PostKeysIdRotate was added

added the non-success response with the status 500

added the optional property expires_at to the response with the 200 status

added the optional property token to the response with the 200 status

added the required property group to the response with the 200 status

added the required property labels to the response with the 200 status

added the required property state to the response with the 200 status