Derives a deterministic GraphiQL authentication key from the app's API secret and store FQDN.
The key is stable across dev server restarts (so browser tabs survive restarts)
but is not guessable without the app secret.
Parameters
apiSecret: string
The Partners app's client secret used as the HMAC key.
storeFqdn: string
The myshopify.com domain the GraphiQL session targets.
Returns string
A 64-character hex string suitable for use as the ?key= query param.
Derives a deterministic GraphiQL authentication key from the app's API secret and store FQDN. The key is stable across dev server restarts (so browser tabs survive restarts) but is not guessable without the app secret.