[PM-5938] Prevent vault coruption on key-rotation on desycned vault

[quexten]

Type of change

- [x] Bug fix
- [ ] New feature development
- [ ] Tech debt (refactoring, code cleanup, dependency upgrades, etc)
- [ ] Build/deploy pipeline (DevOps)
- [ ] Other

Objective

Adds client side guardrails on key rotation to prevent corrupting the vault when

• Sync requests timed out/failed
• Local cipher decryption failed

Reproduction steps for the corruption this prevents are here: #7709
Server side check for ciphers here: bitwarden/server#4098

Code changes

• file.ext: Description of what was changed and why

Screenshots

Before you submit

• Please add unit tests where it makes sense to do so (encouraged but not required)
• If this change requires a documentation update - notify the documentation team
• If this change has particular deployment requirements - notify the DevOps team
• Ensure that all UI additions follow WCAG AA requirements

[codecov]

Codecov Report

Attention: Patch coverage is 50.00000% with 2 lines in your changes are missing coverage. Please review.

Project coverage is 28.09%. Comparing base (ee690cd) to head (292d516).
Report is 6 commits behind head on main.

Files	Patch %	Lines
...app/auth/key-rotation/user-key-rotation.service.ts	50.00%	2 Missing ⚠️

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #9235   +/-   ##
=======================================
  Coverage   28.08%   28.09%           
=======================================
  Files        2435     2435           
  Lines       70502    70530   +28     
  Branches    13135    13145   +10     
=======================================
+ Hits        19804    19812    +8     
- Misses      49159    49178   +19     
- Partials     1539     1540    +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[github-actions]

Checkmarx One – Scan Summary & Details – 6ae513b5-7a9d-4972-8173-b60d7daa5b1e

No New Or Fixed Issues Found