Some of the half-baked plans I have for this site include an even-more half-baked plan to build my own OIDC provider.

Towards that end, I updated the session cookie keys to be a little less ephemeral.

This won't affect anyone but me (since I'm the only person who needs to log in to this site) but it's nice to not have my cookie reset every time I do a deploy or the webserver restarts.

It was also a nice low-impact, low-effort change -- I decided to Just Use Azure (tm) because .NET provides a very easy path for this with Azure Key Vaults and Storage Accounts -- which I hope will provide some much-needed momentum.