First-time login: default credentials are configured via ADMIN_USERNAME + ADMIN_PASSWORD env vars.