Figure out Key Rotation Story

[yourbuddyconner]

We should have a story around Key Rotation in production environments.

Since production keys are in KMS, do we need to have a plan on generating new keys/addresses?

Worst case scenario is an AWS key (with root admin permissions) is compromised and keys are deleted without the core team noticing (unlikely) in which case we will need to re-provision keys, re-fund transaction signers and rotate updater and watcher keys on the core contracts.