A Rancher-managed cluster upgrade completes and one node pool never rejoins

The control plane is healthy, yet one pool cannot reconnect because its agent manifest still references a pre-rotation secret object.