[TSS] Stale channel account not cleared after switching distribution keys

[reecexlm]

This bug can occur when a operator of the SDP switched their distribution seed after creating channel accounts with the old seed. That caused TSS to fail submitting transactions. The error was cannot decrypt private key

chAccPrivateKey := chAcc.PrivateKey
		if !strkey.IsValidEd25519SecretSeed(chAccPrivateKey) {
			chAccPrivateKey, err = ds.encrypter.Decrypt(chAccPrivateKey, ds.encrypterPass)
			if err != nil {
				return nil, fmt.Errorf("cannot decrypt private key: %w", err)
			}
		} 

The problem occurs when switching Distribution accounts a few times resulting in stale channel accounts. Those channel account seeds were not getting decrypted properly when fetched from the database.

THe following attempt to resolve the issue running the following CLI was tried, but that didn’t solve the issue for some reason:

./stellar-disbursement-platform channel-accounts verify --delete-invalid-accounts

🔥 Action Item:

Re-test the scenario described above. Create channel accounts and trigger disbursements with a distribution account, switch distribution accounts then see if we run into this error.

Check that the CLI above solves the problem correctly. If not, we should fix it.