Provisioning

Add venues, print tag sheets and QR codes, and open a staff console.

The password is ADMIN_SECRET. On a deployment it comes from the platform's secret store, not from any file in the repository — on kuso, kuso secret list nemaserve nemaserve shows whether it is set (values are never returned).