Public search query: agent rotated credentials but forgot the CI secrets store: checklist