Bootstrap the first admin user

Single one-shot public registration endpoint for the admin_users table. Fails with 409 once any admin exists; after that, new admins must be invited from /v1/admin-auth/users by an existing admin.