yiekheng e2870a4d27 feat(scripts): add gen_auth_secret.sh helper for CM_AUTH_SECRET
Wraps openssl rand -hex 32 (with /dev/urandom fallback) so operators don't
have to remember the incantation. Defaults to printing the secret;
--write [path] sets/replaces CM_AUTH_SECRET in the target .env (./.env by
default) and prints the restart command.
2026-05-03 10:01:04 +08:00
..