Runbook: secret rotation overdue

Alert source: packages/testkit/alerts/security.rules.yaml

Canonical markdown: docs/runbooks/secret-rotation-overdue.md

[placeholder — landing 2026-Q2] Content mirrored from the canonical runbook under docs/runbooks/. See also the Rotate a Vault secret recipe.