Tsjip dashboard

Hello world, but picky about who gets in.

Day-one setup is locked behind a bootstrap token so random internet goblins cannot enroll first.

Missing setup token. Open /setup?token=YOUR_BOOTSTRAP_TOKEN for first-run enrollment.