A Flux image promotion commit is signed and still rejected

Automated image updates start failing after a bot key rotation even though Git history shows the commits being created.