fix: preserve Docker legacy API key during rotation

tests/unit/commands/docker-command.test.ts

@@ -49,6 +49,18 @@ beforeEach(() => {
       calls.push(`config:${args.join(' ')}`);
     },
   }));
+
+  mock.module('../../../src/commands/docker/show-key-subcommand', () => ({
+    handleShowKey: async (args: string[]) => {
+      calls.push(`show-key:${args.join(' ')}`);
+    },
+  }));
+
+  mock.module('../../../src/commands/docker/finalize-key-rotation-subcommand', () => ({
+    handleFinalizeKeyRotation: async (args: string[]) => {
+      calls.push(`finalize-key-rotation:${args.join(' ')}`);
+    },
+  }));
 });
 
 afterEach(() => {
@@ -104,4 +116,13 @@ describe('docker command', () => {
     expect(calls).toEqual(['help']);
     expect(process.exitCode).toBe(1);
   });
+
+  it('routes Docker key rotation subcommands', async () => {
+    const handleDockerCommand = await loadHandleDockerCommand();
+
+    await handleDockerCommand(['show-key', '--full']);
+    await handleDockerCommand(['finalize-key-rotation']);
+
+    expect(calls).toEqual(['show-key:--full', 'finalize-key-rotation:']);
+  });
 });