-- Do not use a hard-coded default password.
-- Create a password hash using PHP:
-- php -r "echo password_hash('USE_A_LONG_UNIQUE_PASSWORD', PASSWORD_DEFAULT), PHP_EOL;"
-- Then insert the first user via a secure admin-only process, e.g.:
-- INSERT INTO users (full_name,email,password_hash,role,is_active)
-- VALUES ('System Administrator','admin@yourdomain.example','PASTE_HASH_HERE','ADMIN',1);
-- Replace the example email with a real authorised account. Delete this SQL
-- comment file after provisioning if your security policy requires it.