First admin setup

This one-time step sends an admin invitation to the setup email address configured privately for this portal. It closes automatically once an admin exists. Public visitors can never become admins here.