Bootstrap first admin

Run this once after deployment if your instance has no admin yet.

Pending developer requests