Function list_valid_pubkeys 

pub async fn list_valid_pubkeys(
    path: &Path,
) -> Result<Vec<PubkeyInfo>, SecretsError>

List every key in the keystore that is currently valid (active or in-grace and not yet expired).

Order: the active key first, then grace entries sorted by descending valid_until (closest-to-expiry-last, so newer grace entries come before older ones). Stale entries whose retired_grace_until is already in the past are omitted (they’re pending prune).

Errors

• SecretsError::Storage if the keystore cannot be read.