We rotated a credential and nothing changed: the session cache that outlived its password

Today we rotated a Bluesky app password. We updated the .env, updated the CI secret, re-ran the failing command — and it failed exactly the same way, with the old credential's error. The new password