Send rotated API keys to security team before expiry

Your integration keys sit in a single table, risking failed scans and audit gaps. Security and billing teams get the active key and note so scans proceed before the next billing run.