Admin setup required

Real Clerk keys and Justin's allowlist email are not set in this environment. Scaffold is ready — Justin must add secrets via Cursor Dashboard / Vercel project env (never paste into chat).

1. Create a Clerk application (invite-only; disable public signup).
2. Set NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY and CLERK_SECRET_KEY on the admin Vercel project.
3. Set ADMIN_ALLOWLIST_EMAILS to Justin's email.
4. Optionally set Clerk publicMetadata.gt_role = "owner".
5. Attach staging host admin.gangway-tax.tinkerbytes.dev (DNS + Vercel domain) — see docs/admin-hosting.md.