- Change JWT_SECRET_KEY fallback from hardcoded to get_config('jwt_secret_key')
- Allows configuration through database instead of code changes
- Maintains environment variable priority