The oidcConfigFallbackMiddleware permanently mutates process.env on first request then never re-reads from DB. Log an explicit info message when each value is written so operators can see when a restart is required to pick up config changes, and add inline documentation of the single-write semantics to prevent silent misconfiguration after a re-run of the wizard. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>