Signing secret rotation

Rotate an endpoint signing secret with a 24 hour overlap so receivers can switch without dropping a single event.

You can now rotate a signing secret from the dashboard or the API. For 24 hours, Relay signs every request with both the old and new secret, and receivers can accept either.

After the overlap window ends, the old secret stops working automatically.