Key rotation (or other measures) for PASETO v2 "local"
Key rotation is important.

Besides data breaches, unintentional key disclosure happens. For example by committing an unintended file to a public GitHub repository. Also, people having access to a key today can take a copy of that key when they leave the company.

In case of PASETO, brute-forcing the key is not a concern. The key space is ginormous (2^256), so this is infeasible, no matter how much data is collected.

If you control all the applications using that key, and you probably do, key rotation should also be fairly easy to implement.