Admin dashboard

This is the only way a new account gets created — the id is the 4-digit number handed down from the other source, never auto-generated here.

A single raw JavaScript file, not tied to any account. Publicly readable and CORS-open at GET /api/main.js — embed it with <script src="…/api/main.js"></script>. Saving requires the admin key.