Payment provider returns 401

Your service's checkout flow suddenly fails. The dashboard shows that calls to a third-party payment provider are all returning HTTP 401 Unauthorized as of about 15 minutes ago. Your own service is up, other endpoints that don't call the provider are fine, and you didn't deploy anything. A teammate mentions the security team was 'rotating some secrets' this morning. How do you confirm and fix this?