Admin Setup

Create the first admin.

One-time only — this requires the ADMIN_BOOTSTRAP_SECRET from the server's environment and refuses to run once any admin account exists.