Function refuse_legacy_key 

pub fn refuse_legacy_key() -> Result<(), RkError>

Refuse a stale RK_BOT_PRIVATE_KEY export wherever a run starts, so rk setup, rk setup step, and rk setup check all catch it rather than one step alone.

Errors

Refuses when the environment carries the key’s contents.