pub async fn current_active_kid(
pool: &PgPool,
) -> Result<Option<(String, Vec<u8>)>, EngineError>Expand description
Resolve the currently-active HMAC secret (kid + bytes) from
ff_waitpoint_hmac. Returns Ok(None) when the keystore is empty
(bootstrap race); callers treat that as a state error.