Remove the public Docker SECRET_KEY default and resolve missing self-hosted keys during Flask setup.
Persist generated keys through the configured storage root so JWT, session, and file signing paths consume a stable runtime value without special empty-key handling.
Co-authored-by: EndlessLucky <66432853+EndlessLucky@users.noreply.github.com>