Secret rotation pipeline pattern Mastery Check

It should always be implemented with unrestricted credentials. It exists mainly to rename pipeline jobs without changing delivery behavior. Safe rotation creates and verifies the replacement credential before revoking the previous one, avoiding an unnecessary outage window. It removes the need to verify pipeline failures or deployment state.