Merge "fix(build): ensure `$(ROT_KEY)` depends on correct directory rules" into integration