CR-2026-02-25: Wazuh Credential Rotation — Rollback

Rollback Plan

If new password causes issues, restore old password:

# 1. Get old password from gopass history
gopass history v3/domains/d000/k3s/wazuh/indexer

# 2. Repeat Phase 3-5 with old password
# Update K8s secret, update internal_users.yml, restart pods

Rollback to old password defeats the purpose of rotation. Only rollback if the new password is not functioning correctly.