Random Wiki.js admin credentials (SOPS, never displayed) for the config Job to bootstrap setup non-interactively. Authentik group wiki-anwender (curated readers of /anwender); admin role = existing authentik Admins. Part of making Wiki.js fully deployable - no manual setup wizard.