A2K Desk: first-time setup

This runs once. Choose the admin password, then scan the QR code into your authenticator app.