Secrets Manager rotation succeeds but the application keeps reading the old current version stage

The rotation Lambda finishes, yet the service still fails login because the stage labels and the consumer refresh path are out of sync.