One-Time Setup
Bootstrap System Admin
Assign the first system-admin role for global approvals and platform governance.
Use once, then rotate or remove `ADMIN_BOOTSTRAP_TOKEN`.
A system admin already exists. Bootstrap is locked.
Done here? Go to sign in.