Add rotate subcommand to enable local credential rotation (Issue #6)