Update admin creation to use password secrets

Modify server startup to seed admin user when ADMIN_PASSWORD environment variable is present, enabling dynamic password management via secrets.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: 1117a91e-7ac6-4005-bde2-487c64d5789f
Replit-Commit-Checkpoint-Type: full_checkpoint
Replit-Commit-Event-Id: 19f9ef91-a2dd-4827-a162-13ee84fd000b
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/afc5b6d1-cfc6-4564-802f-661c3d73f96b/1117a91e-7ac6-4005-bde2-487c64d5789f/n8R5FaG

Author: manfredsteger

.replit

@@ -41,3 +41,9 @@ externalPort = 80
 
 [agent]
 integrations = ["javascript_sendgrid:1.0.0"]
+
+[userenv]
+
+[userenv.shared]
+ADMIN_USERNAME = "manfredsteger"
+ADMIN_EMAIL = "manfred.steger@ifp.bayern.de"

server/index.ts

@@ -180,10 +180,8 @@ app.use((req, res, next) => {
     console.error('[Branding] Failed to bootstrap branding on startup:', error);
   }
 
-  // Docker deployment: seed admin and demo data in-process
-  // This is more reliable than running separate npx tsx processes
-  // because it reuses the established DB connection and module resolution
-  if (process.env.DOCKER_ENV === 'true') {
+  // Seed/update admin account if ADMIN_PASSWORD is set (Docker or manual override via secrets)
+  if (process.env.DOCKER_ENV === 'true' || process.env.ADMIN_PASSWORD) {
     try {
       const { seedInitialAdmin } = await import('./seed-admin');
       await seedInitialAdmin();