Sso Init
POST/api/v1/auth/sso/init
Generate a cryptographically random state value for the SSO flow.
The state is signed using the application SECRET_KEY and stored in a
short-lived httpOnly cookie so it survives across pods without a shared
cache. The frontend must include the returned state in the IdP
authorization URL and send it back in the callback request.