How is the MAC or HMAC secret shared with the other party for verification?
It is "sent over a secure channel like the AES key".

It is "safe to use the same HMAC secret for each subsequent
AES encrypted message after the initial connection".