feature: enable rotate service secret

[tschaefer]

No description provided.

[Copilot]

Pull request overview

This PR implements a new feature to rotate the service secret for deployed Finch services. The implementation adds a new CLI command finchctl service rotate-secret that generates a new random 32-byte secret, updates the finch.json configuration file, and restarts the finch service to apply the change. Additionally, the PR removes the version field from the finch.json configuration template.

Changes:

• Added RotateSecret method and supporting infrastructure to enable rotating the service secret
• Removed version field from finch.json template
• Updated version from 1.3.0 to 1.7.0 in deployment configuration

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 6 comments.

Show a summary per file

File	Description
internal/service/rotate_secret.go	Implements the core secret rotation logic: reads existing config, generates new 32-byte random secret, updates config file, and restarts finch service
internal/service/service.go	Adds RotateSecret public method with requirements validation and error handling
internal/service/errors.go	Defines RotateServiceSecretError type following existing error pattern
cmd/service/rotate_secret.go	Implements CLI command with standard flags (format, dry-run) and argument parsing
cmd/service/service.go	Registers the new rotate-secret subcommand
internal/service/service_test.go	Adds test coverage for the rotate secret functionality
internal/service/assets/finch.json.tmpl	Removes version field from JSON template
internal/service/deploy.go	Updates version to 1.7.0 (though version field is removed from template)