Hardcoded encryption key for stored API keys when env var not set

[consigcody94]

Found via code audit. apps/server/src/modules/provider/security.ts:4-5. Key derived from contrix-local-provider-secret with hardcoded salt. Default deployment = publicly known encryption key for all stored API keys.