auto-confirm admin during setup, skip email verification

Setup wizard no longer requires email delivery. Admin account is
auto-confirmed and auto-logged-in via token redirect. Adds setup
secret gate for prod (logged on boot), SMTP env var config in
runtime.exs, email_configured? helper, and admin warning banner
when email isn't set up. Includes plan files for this task and
the follow-up email settings UI.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

test/berrypod_web/controllers/setup_controller_test.exs

@@ -0,0 +1,40 @@
+defmodule BerrypodWeb.SetupControllerTest do
+  use BerrypodWeb.ConnCase, async: true
+
+  import Berrypod.AccountsFixtures
+
+  alias Berrypod.Accounts
+
+  describe "GET /setup/login/:token" do
+    test "logs in with a valid token and redirects to /setup", %{conn: conn} do
+      user = user_fixture()
+      token = Accounts.generate_login_token(user)
+
+      conn = get(conn, ~p"/setup/login/#{token}")
+
+      assert redirected_to(conn) == ~p"/setup"
+      assert get_session(conn, :user_token)
+    end
+
+    test "redirects to /setup with error for invalid token", %{conn: conn} do
+      conn = get(conn, ~p"/setup/login/invalid-token")
+
+      assert redirected_to(conn) == ~p"/setup"
+      assert Phoenix.Flash.get(conn.assigns.flash, :error) =~ "Login failed"
+    end
+
+    test "token is consumed after use", %{conn: conn} do
+      user = user_fixture()
+      token = Accounts.generate_login_token(user)
+
+      # First use succeeds
+      conn1 = get(conn, ~p"/setup/login/#{token}")
+      assert redirected_to(conn1) == ~p"/setup"
+
+      # Second use fails (token consumed)
+      conn2 = get(conn, ~p"/setup/login/#{token}")
+      assert redirected_to(conn2) == ~p"/setup"
+      assert Phoenix.Flash.get(conn2.assigns.flash, :error) =~ "Login failed"
+    end
+  end
+end

test/berrypod_web/live/setup/onboarding_test.exs

@@ -4,7 +4,7 @@ defmodule BerrypodWeb.Setup.OnboardingTest do
   import Phoenix.LiveViewTest
   import Berrypod.AccountsFixtures
 
-  alias Berrypod.{Accounts, Products, Settings}
+  alias Berrypod.{Products, Settings}
 
   describe "access rules" do
     test "accessible on fresh install (no admin)", %{conn: conn} do
@@ -30,12 +30,11 @@ defmodule BerrypodWeb.Setup.OnboardingTest do
       assert {:live_redirect, %{to: "/admin"}} = redirect
     end
 
-    test "shows check inbox when admin exists but not logged in", %{conn: conn} do
-      _user = unconfirmed_user_fixture()
+    test "redirects to login when admin exists but not logged in", %{conn: conn} do
+      _user = user_fixture()
 
-      {:ok, _view, html} = live(conn, ~p"/setup")
-      assert html =~ "Check your inbox"
-      refute html =~ "Connect a print provider"
+      {:error, redirect} = live(conn, ~p"/setup")
+      assert {:live_redirect, %{to: "/users/log-in"}} = redirect
     end
 
     test "redirects to / when site is already live", %{conn: conn} do
@@ -57,44 +56,29 @@ defmodule BerrypodWeb.Setup.OnboardingTest do
     end
   end
 
-  describe "phase: email form" do
-    test "shows only email form on fresh install", %{conn: conn} do
+  describe "fresh install (no admin)" do
+    test "shows all three cards with email form active", %{conn: conn} do
       {:ok, _view, html} = live(conn, ~p"/setup")
 
       assert html =~ "Create admin account"
-      refute html =~ "Connect a print provider"
-      refute html =~ "Connect payments"
+      assert html =~ "Connect a print provider"
+      assert html =~ "Connect payments"
+    end
+
+    test "creating account auto-confirms and redirects to login", %{conn: conn} do
+      {:ok, view, _html} = live(conn, ~p"/setup")
+
+      view
+      |> form(~s(form[phx-submit="create_account"]), account: %{email: "admin@example.com"})
+      |> render_submit()
+
+      # The LiveView redirects to /setup/login/:token
+      {path, _flash} = assert_redirect(view)
+      assert path =~ ~r"/setup/login/.+"
     end
   end
 
-  describe "phase: check inbox" do
-    test "shows check inbox after creating account", %{conn: conn} do
-      {:ok, view, _html} = live(conn, ~p"/setup")
-
-      html =
-        view
-        |> form("form", account: %{email: "admin@example.com"})
-        |> render_submit()
-
-      assert html =~ "Check your inbox"
-      assert html =~ "admin@example.com"
-      refute html =~ "Connect a print provider"
-    end
-
-    test "start over resets to email form", %{conn: conn} do
-      _user = unconfirmed_user_fixture()
-
-      {:ok, view, _html} = live(conn, ~p"/setup")
-
-      html = render_click(view, "start_over")
-
-      assert html =~ "Create admin account"
-      refute html =~ "Check your inbox"
-      refute Accounts.has_admin?()
-    end
-  end
-
-  describe "phase: configure (logged in)" do
+  describe "configure (logged in)" do
     setup :register_and_log_in_user
 
     test "shows provider and stripe steps", %{conn: conn, user: user} do