Handle SSH and git signing key rotation

[ETeissonniere]

Add tooling or documentation for rotating SSH and git signing keys:

• Script to generate new SSH key pair
• Update config/git/allowed_signers with new signing key
• Revoke/remove old keys from git providers (GitHub, GitLab, Gitea)
• Register new keys with git providers
• Update any other systems that depend on the old keys