One-time setup

Create owner account

Requires `ADMIN_SETUP_TOKEN` and locks automatically after the first admin exists.