feat: first-run claim wizard (no default admin, claim code from the backend log); owner list shows account and passkey; container install first [CI]

web/admin/src/App.tsx

@@ -8,6 +8,7 @@ import { describeError, Field, Segmented, SourceButton, Spinner, ThemeToggle } f
 import { useAuth } from './auth'
 import { BackendUpdateNotice } from './BackendUpdateNotice'
 import { PasskeyNotice } from './PasskeyNotice'
+import { Setup } from './Setup'
 import { AgentDetail } from './pages/AgentDetail'
 import { Agents } from './pages/Agents'
 import { Probes } from './pages/Probes'
@@ -232,7 +233,7 @@ const NAV = [
 ]
 
 export function App() {
-  const { me, ready, logout } = useAuth()
+  const { me, ready, logout, setupActive } = useAuth()
   if (!ready) {
     return (
       <div className="login">
@@ -240,6 +241,7 @@ export function App() {
       </div>
     )
   }
+  if (setupActive) return <Setup />
   if (!me) return <Login />
   // 密码登录的会话没有任何能力：只给它添加 Passkey 的页面