fix(plugin-auth): build one better-auth instance per boot, so the RFC 8707 resource row is seeded once

fix(plugin-auth): build one better-auth instance per boot, so the RFC 8707 resource row is seeded once #33966