Initial BCA Portal Setup

This is required once. It creates the first administrator account and stores the OpenAI API key encrypted in the private SP Certification portal storage.

Do not share the setup code or OpenAI API key with staff. Staff only need their portal email and password after setup.