stateEncryptionKey
Symmetric key used to encrypt the in-flight OAuth state cookie carrying state, nonce, and the PKCE code verifier between the login redirect and the callback.
When not set, an ephemeral key is generated and a warning is logged. Configure a shared key so OAuth state cookies remain valid across application restarts and instances.