Admin CLI

Stage: Alpha Status: Draft

ironroot-admin is for trusted operators. It handles first-run bootstrap, security checks, local CA generation, bootstrap token creation, revocation actions, and migration status.

Run it from a secure operator workstation. Some commands touch sensitive config, CA metadata, or local database state.