Secrets scanner flags a rotated key that is already revoked

The alert is technically correct for the repository history, but the key is no longer active and the response path is unclear.