API and SSO keys are reset when a subscription ends and don't come back after resubscribing

Expected Behavior When a paid subscription ends and the workspace later goes back to a paid plan, the existing API key and SSO key keep working. Integrations pick up again as soon as the plan is active. Current Behavior When a subscription ends (for example after an unpaid renewal), the workspace moves to the Free plan and the API key and SSO key are replaced with new ones. Restarting the subscription doesn't bring the old keys back, so every integration that uses them stays broken until someone copies the new keys over. Nothing in the dashboard or by email says the keys changed, so it looks like someone on the team rotated them. Possible Solution Keep the keys on a downgrade and only block API and SSO access while the workspace is on Free. If the keys do have to change, tell the workspace admins by email and show it under Settings → Developer. Steps to Reproduce On a paid plan, note the API key and SSO key under Settings → Developer. Let the subscription end so the workspace drops to Free. Subscribe to a paid plan again. Open Settings → Developer: both keys are different, and requests with the old API key fail. Context (Environment) Reported by a customer whose integration broke without anyone on their team touching the keys. There's no audit log, so they had no way to find out what happened.