Collapse the two-phase bootstrap (email a verification link → verify screen) into one direct step: the Bootstrap form collects name/email/username/password and posts once to /bootstrap, which creates the first user directly as an active Super Admin (+ provisions DATA_PATH/<email>). Still gated to an empty user table. The invite flow (/verify, /verify-token) is untouched. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>