How do you rotate API keys safely across microservices?

I’m researching this for a project and would love real-world input. If you’ve built or shipped something here, what did you learn? Context: I’m Laura Powell and I’m evaluating options for our team.