Admin sign-in

This gates provisioning/overwriting a tenant's app-owned API key — a separate credential from your own AccuBuild sign-in.