A001

The auth secret is missing or under 32 characters on a production server.

Fix: Set BETTER_AUTH_SECRET (openssl rand -base64 32) in the server's environment.

Status in kerf@0.1.0: reported by @kerf-js/start when it serves or renders the route, and by kerf check and kerf routes --meta.