Reconsider how we define initial admin users

[sodic]

We tell the app about initial admins through an environment variable. This is fragile and could cause issues.

Options:

• Restrict the env varialbe to contain only a single admin email (mitigates the issue but still isn't perfect)
• Stop supporting defining admins through env vars and require users to do so manually in the production database (not ideal, adds extra friction)
• Something else?

[FranjoMindek]

Single initial admin user through env vars is something almost everyone does.
I wouldn't go removing that.

But I also wouldn't allow for multiple admins through env vars.