prepare

abstract suspend fun prepare(from: StorageKeyRotationState.Stable, nextKeyId: StorageKeyId)

STABLE to PREPARING: records nextKeyId as the allocated key and as the new key ID high-water mark, in one commit, so it is never allocated twice.