POST /api/setup/bootstrap creates the admin account, default location and a wings-linked node, marks setup complete and returns the wings config.yml. Guarded by BOOTSTRAP_SECRET (header match when set; proxy-less localhost only when unset). Extracts the wings config template into packages/api/src/lib/wings-config.ts.