Admin setup

One-time install. Secrets live in storage/app.secrets.php (not web-readable).