Encrypt OIDC Config at Rest

Is this suited for github?

• Yes, this is suited for github

Is your feature request related to a problem? Please describe.

The OIDC config used by the SSO plugin is stored in the database as plain-text; this includes the clientSecret field which is sensitive information.

Describe the solution you'd like

This config (or at least the clientSecret) should be encrypted at rest using the BETTER_AUTH_SECRET to avoid exposure of sensitive information.

Describe alternatives you've considered

N/A

Additional context

No response