Single admin role — creds from platforms/web-admin/env.yaml
users: - email: "admin@itio.internal" password_hash: "$2b$12$..." role: "admin"