Constant MIN_TIME_BETWEEN_ROTATIONS_HOURS 

pub const MIN_TIME_BETWEEN_ROTATIONS_HOURS: i64 = 1;

Minimum time between rotations in hours (1 hour)

Even if rotation is due (based on rotate_at timestamp), the reconciler will not rotate a key if it was created or rotated within the last hour.

This prevents rapid successive rotations in edge cases (e.g., clock skew, manual timestamp manipulation, reconciliation loops).