Five secrets, kept across redeploys
JWT_SECRET, ADMIN_JWT_SECRET, APP_KEYS, API_TOKEN_SALT and TRANSFER_TOKEN_SALT are generated separately and persisted. Upstream reuses one value for two of them and omits the salts, which invalidates issued API tokens on a redeploy.